Extract vendored dep analysis into vendor module

Use in gem and git modules
Implement Gemfile#vendored, alias for all deps
Add TODO comment in Gemfile class