vendorize build dependencies

[thvitt]

at least the more obscure build dependencies need to be vendored in somehow, there is too much dependency on fragile infrastructure like the wuerzburg servers