Vendor 3rd-party runtime dependencies

KDAV has runtime dependencies which cannot easily be resolved on
distributions. Thus this change vendors and locks the runtime
dependencies to be shipped with the KDAV source code.

To update again, use something like

```
composer install --no-dev --ignore-platform-reqs
```

in the source directory.

fix remaining image

Signed-off-by: Felix Bartels <[email protected]>