Go itself calls this a "module path" rather than an "import path" - it
will rarely be a valid import path anyway.

With go_deps.from_file, dependencies can be parsed from a go.mod/go.sum
pair directly by the go_deps module extension. Users only have to
declare visibility for their *direct* dependencies in their
MODULE.bazel.