Lock CanJS package versions

[phillipskevin]

Our general recommendation is to lock your can-* dependencies to specific versions and update when canjs/canjs updates or when you need a specific bug fix.

We should follow this strategies in apps created by donejs.

[frank-dspeed]

@phillipskevin i think a tool that can lock all can-* packages to match tags on github/canjs/canjs would be more perfect so you can lock to canjs/canjs versions