vault: Move feature into its own django application
It was previously included in the browse application but it makes sense to isolate it in its own application in order to easily deactivate it if needed.
Related to #4398 (closed)
Migrated from D8375 (view on Phabricator)