Rearrange code to use xstrfmtcat() instead of static char[] arrays.

Change _build_path to return the xmalloc()'d string, and make sure
to free it where appropriate.

Add comment about how the processing of the PATH environment variable
here is backwards from convention.