Allow locking some dependencies

[bahmutov]

For example benv / jsdom or Q often breaks
Allow reading list of locked dependencies in the package.json file, something like

"config": {
  "next-update": {
     "skip": ["q", "benv"]
  }
}

[bahmutov]

done