Display analysis information to user

[mr-tz]

Summary

Display information such as:

• few library functions recognized via FLIRT (memset, strlen, etc.) -> results may include FPs
• no/few API calls
• sample has file limitation
  • I think we should still show the capability table by default, as almost always this triggers re-running capa

Motivation

Provide more useful context to (novice) users.

[mr-tz]

From #2134 (comment)

Stepping back here for a moment, let's consider if we want to implement this differently:

• add new characteristics: few imports, few detected library functions
• add new limitation rules using these features
• update behavior to handle has_file_limitation or similar

That way we can handle the various limitations/warnings consistently. The core extraction logic still resides in capa but we don't have to extend the meta data.

Related: should we provide functionality to easier leverage this in other tools? Right now other tools need to reimplement the logic we have in capa.main to handle special cases/detections.