License Management for vendored go dependencies

Apparently our license management did not work out of the box for vendored go dependencies, like e.g. used by Gitaly: gitaly!1076 (merged)

Our work around for now is to just skip the SETUP_CMD, as the vendored dependencies are in the repo and need no setup. This works, but we probably should support vendored go dependencies out of the box