Add checks for un-normalized spec paths and spec paths ending in BUILD*.

This tightens a few holes and narrowly defines valid specs as one of:
  standard: //a, //a:a, a, a:a
  root:     //:b
  relative: :c

No paths with ., .. or trailing components matching BUILD* are allowed.