Put all config.rb access into a jail.

This PR introduces a new `ConfigContext` which is the scope in which `config.rb` executes.

As a side-effect, I've disabled the backwards compatibility in `Configuration` so old/deprecated accesses are now errors.

This is part one of the jail series. Next we clamp down on the render/helper context.