Isolate dependencies with LavaMoat

[kirushik]

Supply chain attacks are of a major concern for BananaSplit.
Adding LavaMoat to the build should add another defence layer against possible attacks here.