Dependency: Isolate SemVer version logic in its own struct

Currently, Dependency is a mesh of logic, having evolved from a SemVer + branch only
version specification to semver, branch, path, repository.
In order to bring it under control, and attempt to have a smarter dependency matching,
we must first isolate the different ways we specify dependencies.