Add warning for dependencies with missing auth (and api)

[rcmlz]

Consider adressing the "malicious guy publishes modules with same name but higher version number"-Problem

Bad:

  "depends": [
    "App::Mi6",
  ],

Good:

  "depends": [
    "App::Mi6:auth<zef:skaji>",
  ],

Maybe also suggest that META6.json should contain an api declaration

{
  "api": "v1",
}

such that users can do

"App::Mi6:auth<zef:skaji>:api<v1>"

in order to not get suprised by breaking changes.