rule set does not correctly validate dependencies across scopes

[williballenthin]

capa-rules contains at least one rule with an impossible dependency, and capa nor its linter complains. We should ensure that capa correct tracks dependencies across scopes, or warns the user when its impossible.

log keystrokes via application hook is a dynamic: call scoped rule that relies on set application hook, which is a dynamic: thread scoped rule. Since we evaluate from small to large scopes (call before thread), this dependency will never be satisfied.

[williballenthin]

also allocate memory > link function at runtime on Windows

[mr-tz]

@williballenthin is it fine if we punt this again to the next release or should we address it now for v7.3.0?