AppShims: Use correct directory for crash reporting.

One of the crash reporting directories is derived by getting user data
dir from PathService. Swapping the initialization order fixes that case.
The actual crash dumps however instead use the "default" user data dir.
To make sure that takes the correct browser channel into account, this
CL also fixes chrome::ProductDirName() to look at chrome's app bundle
rather than the shim's app bundle by switching from
chrome::OuterAppBundle to base::apple::OuterBundle (the base version
is generally initialized to whatever the chrome:: version returns;
except in app shims where the chrome version doesn't return the chrome
app, and the base version is instead initialized with different logic
to use the correct bundle).

Bug: 40807881
Change-Id: I7645d26176390209c132c2d63492a5db6cb932cd
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6952237
Commit-Queue: Marijn Kruisselbrink <mek@chromium.org>
Reviewed-by: Avi Drissman <avi@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1516291}