Add unit tests for sources.go

Tests cover most of the cache and download related code paths and specify the expected result of various starting states and external failure modes.
Where the current code's behaviour doesn't match a test's expectations, the test is disabled and annotated with a TODO until it can be fixed.
Added dependency on `github.com/powerman/check` and ran `go mod vendor`.

vendor/github.com/powerman/check/goconvey.go

@@ -0,0 +1,42 @@
+package check
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"os"
+
+	"github.com/smartystreets/goconvey/convey/reporting"
+)
+
+var errNoGoConvey = errors.New("goconvey not detected")
+
+func reportToGoConvey(actual, expected, failure string) error {
+	if !flags.detect().conveyJSON {
+		return errNoGoConvey
+	}
+
+	testFile, testLine, funcLine := callerTestFileLines()
+	report := reporting.ScopeResult{
+		File: testFile,
+		Line: funcLine,
+		Assertions: []*reporting.AssertionResult{{
+			File:     testFile,
+			Line:     testLine,
+			Expected: expected,
+			Actual:   actual,
+			Failure:  failure,
+		}},
+	}
+
+	var buf bytes.Buffer
+	fmt.Fprintln(&buf, reporting.OpenJson)
+	if err := json.NewEncoder(&buf).Encode(report); err != nil {
+		return err
+	}
+	fmt.Fprintln(&buf, ",")
+	fmt.Fprintln(&buf, reporting.CloseJson)
+	_, err := buf.WriteTo(os.Stdout)
+	return err
+}