simplify requested version detection, move node and npm binaries to /app/vendor