externalize the setting of system properties. `app {}` now accepts `system_properties` map which gets merged with template's system properties, thus output app gets the merged map.