Variable restrictions sniff

@westonruter : Based off function-restrictions-sniff, this aims to do the same for variables, hunting them down and checking against pre-defined set of group checks.

Fixes #78 

Merge only after #106, making sure any commits from `function-restriction-sniff` get added to this branch.