Use bundled dependencies as default

[JackyWoo]

Greetings!

I wonder whether we should use bundled but not system dependencies as default. When ${dependency_name}_SOURCE is "AUTO" velox will search SYSTEM dependency first.

macro(resolve_dependency dependency_name)
  set(find_package_args ${dependency_name} ${ARGN})
  list(REMOVE_ITEM find_package_args REQUIRED QUIET)
  if(${dependency_name}_SOURCE STREQUAL "AUTO")
    find_package(${find_package_args})
    if(${${dependency_name}_FOUND})
      set(${dependency_name}_SOURCE "SYSTEM")
    else()
      set(${dependency_name}_SOURCE "BUNDLED")
      build_dependency(${dependency_name})
    endif()

The main reason I have the wonder is that if user have installed illegal version of dependencies the build may fail. see #11215 #1339