Should allow putting third-party JS in `public/javascripts/vendors/`

[rondevera]

AssetHat should check for local copies of vendor JS in public/javascripts/vendors/ by default, then public/javascripts/vendor/, then public/javascripts/. For consistency, similar ought to be done with CSS; some third-party JS ships with stylesheets.