put block around main_vendor js in main_django.html

should be a no-op for edx-east, but allow edx-west to remove
vendor.js with a blank {% block %}
in our password_reset_confirm.html to fix a bug

lms/templates/main_django.html

@@ -13,7 +13,9 @@
   <link rel="icon" type="image/x-icon" href="{% static FAVICON_PATH %}" />
   
   {% compressed_css 'application' %}
+  {% block main_vendor_js %}
   {% compressed_js 'main_vendor' %}
+  {% endblock %}
   {% block headextra %}{% endblock %}
   {% if MITX_FEATURES.USE_CUSTOM_THEME %}
     {% include "theme-head-extra.html" %}