Make bazel build fully hermetic

We no longer reference @bazel_tools//third_party. All of our transitive
dependencies are now specified explicitly in our WORKSPACE file.

I also fixed the way that jar dependencies are exported, so we don't
break strict dependency checking.
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=116421176

WORKSPACE

@@ -156,11 +156,12 @@ maven_jar(
     sha1 = "5a2f4be6cf41e27ed7119d26cb8f106300d87d91",
 )
 
-new_git_repository(
+new_http_archive(
     name = "closure_library",
     build_file = "third_party/closure/library/closure_library.BUILD",
-    remote = "https://github.com/google/closure-library.git",
-    tag = "20160208",
+    sha256 = "8f610300e4930190137505a574a54d12346426f2a7b4f179026e41674e452a86",
+    strip_prefix = "closure-library-20160208",
+    url = "https://github.com/google/closure-library/archive/20160208.zip",
 )
 
 maven_jar(
@@ -283,6 +284,24 @@ maven_jar(
     sha1 = "c11014f06ade0a418b2028df41b17f3b17d9cb21",
 )
 
+maven_jar(
+    name = "gson",
+    artifact = "com.google.code.gson:gson:2.4",
+    sha1 = "0695b63d702f505b9b916e02272e3b6381bade7f",
+)
+
+maven_jar(
+    name = "guava",
+    artifact = "com.google.guava:guava:19.0",
+    sha1 = "6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9",
+)
+
+maven_jar(
+    name = "guava_testlib",
+    artifact = "com.google.guava:guava-testlib:19.0",
+    sha1 = "ce5b880b206de3f76d364988a6308c68c726f74a",
+)
+
 maven_jar(
     name = "guice",
     artifact = "com.google.inject:guice:3.0",
@@ -391,6 +410,12 @@ maven_jar(
     sha1 = "4056712d2e6db043a38b78c4ee2130c74bae7216",
 )
 
+maven_jar(
+    name = "joda_time",
+    artifact = "joda-time:joda-time:2.3",
+    sha1 = "56498efd17752898cfcc3868c1b6211a07b12b8f",
+)
+
 maven_jar(
     name = "json",
     artifact = "org.json:json:20090211",
@@ -403,6 +428,24 @@ maven_jar(
     sha1 = "c9ad4a0850ab676c5c64461a05ca524cdfff59f1",
 )
 
+maven_jar(
+    name = "jsr305",
+    artifact = "com.google.code.findbugs:jsr305:1.3.9",
+    sha1 = "40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf",
+)
+
+maven_jar(
+    name = "jsr330_inject",
+    artifact = "javax.inject:javax.inject:1",
+    sha1 = "6975da39a7040257bd51d21a231b76c915872d38",
+)
+
+maven_jar(
+    name = "junit",
+    artifact = "junit:junit:4.11",
+    sha1 = "4e031bb61df09069aeb2bffb4019e7a5034a4ee0",
+)
+
 maven_jar(
     name = "jzlib",
     artifact = "com.jcraft:jzlib:1.1.3",
@@ -415,6 +458,12 @@ maven_jar(
     sha1 = "4ae3550e925c2621eca3ef9fb4de5298d6f91cc4",
 )
 
+maven_jar(
+    name = "mockito",
+    artifact = "org.mockito:mockito-all:1.9.5",
+    sha1 = "79a8984096fc6591c1e3690e07d41be506356fa5",
+)
+
 # XXX: new_http_archive() doesn't maintain the executable bit.
 #      https://github.com/bazelbuild/bazel/issues/984
 http_file(
@@ -464,3 +513,9 @@ maven_jar(
     artifact = "org.apache.sshd:sshd-core:0.7.0",
     sha1 = "ef5d0cae23845dead3fc53ecd61bd990ed42f60f",
 )
+
+maven_jar(
+    name = "truth",
+    artifact = "com.google.truth:truth:0.28",
+    sha1 = "0a388c7877c845ff4b8e19689dda5ac9d34622c4",
+)