Support application-supplied checkers

[wjt]

At present, when an application (like Firefox or Flash) needs a specialised checker, it needs to be added to this repo, then enabled in the app's repo. It might be nice to allow applications to provide their own checkers out-of-tree – though there are obvious “arbitrary code execution” caveats here!