Vendor dependencies

[kannon92]

I notice that Kueue vendors their dependencies. They found that it helped speed up the build system.

I'd like to propose that we vendor also so that we are consistent with kueue and we can gain some benefits of builds.

kubernetes-sigs/kueue#2374

[ahg-g]

I am not sure if this is needed, what we currently have works and the build time is not a major issue here.

[ahg-g]

I just don't want to unnecessarily introduce new sources of errors/problems

[kannon92]

I'm unclear on the motivation for Kueue.

From the kueue issue,

We are trying to build images in a different infrastructure that requires vendoring the dependencies.

I can attest that a lot of build tooling for FIPS really wants vendored dependencies. I can ask around to see if this is a requirement for FIPS or just a nice to have.

[andreyvelich]

I agree with @ahg-g, and I added my thoughts here: #764 (comment).