Cleanup vendor code

[jdehaan]

Vendor code coming from https://github.com/bpmn-io shall be

• [x] put in its own vendordirectory
• [x] taken care about adding appropriate license

This ensures things are clearly separated and easier to grasp what parts of code are

• internal or external code
• under this or that license