Deprecate use_composer and replace with vendors_method option

Fixes #366 - `use_composer` ignores` vendors_mode` and uses the `update_vendors` option to mean the wrong thing, so this replaces it with a new option `vendors_method`.