Merge pull request golang#489 from sdboyer/new-ensure

Implement new spec for `dep ensure`

Merge pull request golang#781 from ibrasho-forks/fix-symlink-cloning-…

…on-windows

internal/fs: don't clone symlinks on windows

Remove some old TODOs that no longer apply

Merge meta-PR to stabilize Gopkg metadata files