MODULES_FILTER should apply to imported modules

We have a mechanism to exclude certain modules completely from a build. This is handled with the MODULES_FILTER variable. It's currently flawed in that it doesn't apply to imported modules (--with-import-modules).