Next major stroke, admin UI: make file widgets and formatters sortable

and have a checkbox to enable/disable them.

The latter comes with additional functionality in terms of a validator
that only accepts files when any enabled widget handles it.
a.k.a. easy mimetype based upload restrictions. Makes it a breeze
to have image-only filefields without specifying the allowed extensions.