Fix role and dotfile dependencies

Make sure that dotfiles get applied only after the corresponding roles,
and make roles dependent on lower roles (e.g. devel on base, etc.)