This is a weird one because `make bootstrap` does a `go get vault` so CI
never fails due to missing Vault dependencies. However developer
machines will have whatever version of vault they grabbed last time they
bootstrapped a new dev environment.
This can lead to surprising build issues and different devs testing
slightly different code.
So let's vendor all test deps to try to keep the Nomad repo
self-contained.
