BUG: fix some memory leaks found by cpychecker

only the one in normalize___call___args can be can be a real issue.
MAINT: enable external api use when running cpychecker

allows using the annotations in umath module
BLD: fix random API hash due to memory references of annotations

also update hash for the new include guard of the api header.
Merge pull request #4826 from juliantaylor/umath-static-fixes

umath static analysis fixes