appc/spec: Collapse app and fileset manifests

This reworks the app image and fileset concepts to collapse them into a single
manifest, the App Image Manifest. The execution details are now optional. It
also describes a dependency retrieval/matching process based on labels.
/cc @sgotti this adds the pathWhitelist we talked about in #236