Do not validate vendor and cartridge names when instantiating Manifest from filesystem

This addresses Bug 959843.