Instantiate EvalContext after CheckOpts for binaries

EvalContext is typically the first caller of enterprise extensions, so this
allows for increasing log level in CheckOpts first. Hopefully.
Redmine#4535: improved extension loading messages and try loading from WORKDIR as non-root