Fix most clang analyzer errors
Replace malloc/calloc/realloc with versions that abort on failure
More valgrind fixes
c: try really hard to continue running after expected failures in debug mode

Tests that are expected to fail with assertions, crashes, timeouts, and so
on are difficult to deal with when not using a child process.  Try to contend
with these cases with creative signal handling.  This is on a best-effort
basis only.
doc: update documentation with new options
Upgrade makekit