fix: Allow downstream-vendor.sh to use subdirs

So that it can tackle workhorse being in a subdir inside the gitlab-rails project (also update to point to that project instead). Something I encountered while trying to vendor !168 (merged)