Fix crash on non-git source deps in deps provider

The 'element(1, ..)' guard would always fail and cause crashes.

profiles: combine lists of values for conflicting config options

We can use 3.0.0 when we're done.

Upgrade pkg

- Track level of packages properly, they're not level 0 anymore (this
  could yield an issue where a src dep takes precedence over a pkg dep)
- Proper stable sort of vertices in the digraph module
- PkgDeps no longer 'see themselves' when fetching and upgrading after
  locking themselves
- Pkg Locks are added to pkg deps rather than source deps
- Updating test cases to support pkg mocking on top of src mocking

Fix lock merging for nonexistant lock files.

basic profile deps tests

output hook stdout and don't add extra newline

don't unescessarily recompile yrl/xrl files

fixes #175

don't attempt to merge locks when there are no dependencies

fixes #172

release and tar tests

consolidate app validation and exist checks

Refactor install deps

Old one might have been a mistake; this one works fine.

- Make functions shorter
- Unnest some functions
- Split up and give names to major conditional branches

follow xdg standard. fixes #122

cmake template

check for newly added deps in the config file that aren't level 0 in lock

update project app list with new appinfo records after build

use project sub-apps with deps in their rebar.config

fix error where an exception in ct could hang rebar by monitoring

the process where ct is performed

suppress common_test output unless `rebar3 ct` is run with verbose switch

purge mods loaded during check to see if they need to be recompiled