Move composer's 'vendor' directory out of 'public'