allow config var override of BUILDPACK_VENDOR_URL