app: restrict module-path transformations
doc: update README with `CATCH_MODULE_PATHS`