Rtcds check model

Optionally check against model list for host. Refuse to start model if not in the list.

Set

CHECK_MODEL_IN_HOST=true

in environment to enable check.

Check can be overridden on command line with --force-start option.

Closes #138 (closed).