Move to a one-container-per-"app" model.

This doesn't yet rename anything, but shifts app-global config to the
container, and shares runtimes across all $lang Applications within
the container.