Fix vendor file scope with addSourceURLs=true

When addSourceURLs is enabled with the CommonJS wrapper, vendor files get wrapped in a closure which breaks certain libraries during debugging (e.g. new Handlebars runtime included in handlebars-brunch).

Switch to eval from Function so vendor files are executed in the same scope for both debug and production.