Place Spree assets at vendor/assets so that 'require_tree .' in application's assets does not load Spree's assets

This *definitely* breaks existing behaviour.

Assets should now be renamed:

* app/assets/stylesheets/store/all[css|js] => app/assets/stylesheets/spree/frontend/all.[css|js]

Fixes #4050