Use the new validation mechanism for vulnerability/fragility functions

Now commonlib can read and validate directly a lot more input files. A lot of functionality has been moved
from the engine.
The tests are green: https://ci.openquake.org/job/zdevel_oq-commonlib/114/
What is the meaning of this rsplit ? 
KNOWN_VULNERABILITIES items haven't all the same '''_vulnerability''' suffix ...