Locks down: * go-rundewidth (via tablewriter) * golang.org/x/sys * prometheus/{common,procfs} (via prometheus-client)
Now using tags instead of SHAs
Moves the vendor/ directory to cmd/vendor. Vendored binaries are built from cmd/, which is backed by symlinks pointing back to repo root.