Implement Tangram vendoring of Go dependencies

[deciduously]

The current go.build() implementation uses the host tooling in an unsafe target to obtain dependencies. Implement determining and fetching dependencies as Tangram targets, mirroring the pattern used in rust and node.