Write REP/Guide on why and when to use vendor packages

[Michael Carroll]

Write a REP plus a guide to outline why and when we should be using vendor packages in a ROS release.

This should serve as a modern variant of https://ros.org/reps/rep-0136.html