Fix CHECK lines in capsicum test and update CapabilitySysCallsAnalysis to use the Sandbox::getCalls() function to obtain all callinsts within the sandbox