hack/vendor.sh: overwrite existing dependencies and remove .git so they can be checked in