Flexible app flag

If the run command has a `-a` in it, require users to provide the command
after a `--`.

For all other commands, allow the `-a` flag to appear anywhere.

This might be confusing because the app flag is the only one to get special treatment like this (other flags must be provided in the correct place). However, @fdr thinks this will be sufficient to make his life better.