Added vendor and composer.lock to .gitignore

- The slash at the beginning of `/vendors` allows 3rd party extensions to have a vendors dir
- The composer.lock file is generated by running `composer install/update` and could land in the repository by accident