Enforce peer dependencies

[RomainMuller]

JSII modules should enforce that any dependency they take is also a peer dependency, as this is the least common denominator of all the runtimes that would be supported (aka it's the "easiest" way to manage dependencies).