Now that vendors has been merged into istio/istio (no longer a submodule), let's use this issue as a forum for discussion on what the new process for adding deps should be.