Enforce plugin’s deps version

Today a plugin describe their deps as an array of string. Make a struct and add version. Ideally add what function they use. User could be able to authorize or not what a plugin can call.

Use PURL now, so if user set version it will be checked, but not mandatory