v1.4.9

Move the config to /var/lib/docky to close a deck to root escalation
config.json and state.json are now root owned and live outside the user home. Script and command tasks run as root, so a config the deck user could write was a free path from deck to root on the next trigger. Root owning only the file was not enough, since ~/.config belongs to deck and a rename needs write permission on the parent directory. An existing config is imported once on first load and the old file is renamed. A symlink left in the old directory is retired unread. Editing by hand now needs sudo, the panel does not.