internal/rosa: populate runtime dependencies

This also removes manually resolved indirect dependencies.

Signed-off-by: Ophestra <cat@gensokyo.uk>

internal/rosa/nettle.go

@@ -26,6 +26,10 @@ func init() {
 		Description: "a low-level cryptographic library",
 		Website:     "https://www.lysator.liu.se/~nisse/nettle/",
 
+		Dependencies: P{
+			GMP,
+		},
+
 		ID: 2073,
 	}
 }