Warn on version ranges for deps :tree

Use the new :repository-session-fn keyword for pomegranate
to add a DependencyChainFilter that checks for version ranges.

We store them in an atom because this might happen on another thread,
and we need to allow all of the ranges to be found.

Fixes #734