Minimal module dependencies for gitalypb

See discussion: !228 (comment 148397457)

Note: commits cannot be squashed since go/internal/go.mod depends on a commit in this MR