Source app specific config earlier

This will let us set buffer local variables to influence navigation
command creation and other behaviors.
Don't source app config if modelines are disabled

Both modelines and app specific config have the same security risks.
Allow defining per-app navigation commands

Closes #195.