Add cppcheck script to qa/
Suppress the 3x current cppcheck warnings

These warnings are valid and useful in general, but in these
particular cases I'd rather continue using the non-reentrant
calls because (a) they're simpler and (b) these are all
called exclusively from startup code long before we spawn
any threads.