update vendor.sh and notary api for vendored changes

Signed-off-by: Jessica Frazelle <acidburn@docker.com>