Add support for excludes/includes in requireJavaVendor rule

There was a suggestion here [1] to add includes/excludes support in requireJavaVendor rule. Right now it's not clear how it would work if you define the same vendor name in exclude and include lists but implementation can be more or less copied from BannedDependencies rule.

[1] https://issues.apache.org/jira/browse/MENFORCER-338?focusedCommentId=17169044&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-17169044