gitignore vendor (composer) directory

Don't version your vendor directory - developers can install their own dependencies using the composer.json and composer.lock files.