app: port XCF loading/saving to GIO

but for now restrict it to local files (see bug #709432).
Thanks to Jehan and Sven for testing.