Added vendor dependencies to box.json for phar building

Fix for https://github.com/phpDocumentor/phpDocumentor2/issues/1470