config: sanitize identifers when reading config

* most identifier restricted to [a-zA-Z0-9_\-]+
* task group id also allows .
ui: caption fix
ui: graphviz-powered deployment diagram