.vendor_url_map maps individual destination file paths to source URLs

No more .tar.gz files, just a straight copy.
Add back in .tar.gz functionality and use triples to distinguish
Merge branch 'map-not-tar'