hard-code /app/vendor/bin into PATH instead