cut dependency of app package on review package

whenever it's this easy to avoid an extra arrow in the dependency
graph, it should always be done