Veto handling in NxApplication

The state changing events were always Vetoable, but their vetoed state was never handled.

This adds a simple handling for them, to make a plugin able to "veto" Nx start/init in some cases of complete failure (on behalf of a plugin), like failed upgrade or so.

CI
TBD