Ignore .git directories in Composer dependencies

This causes git to think the dependency is a submodule, and it isn't. See
https://getcomposer.org/doc/faqs/should-i-commit-the-dependencies-in-my-vendor-directory.md
for more information.