audit: Escape interpolated string in regexp

This avoids issues with names containing special characters like e.g. [

Fixes #1431

Correct a few typos

rubocop: exclude more tap dirs from hash rockets.

...and update man pages where applicable

audit: check more unscoped test calls.

This is useful for e.g. homebrew/bundle that doesn't live in just
`cmd`.

audit: restore check that was lost in #927

This audit check ensures that certain build dependencies
are explicitly marked either as `:build` or `:run`.
It seems to have been lost in #927.
It was also adjusted in #1290.

Ensure that the name is suffixed with whitespace or quotes.

Also check `def test`, `shell_output`, `pipe_output` and method calls
using parentheses.

build: write options to file.

boneyard-formula-pr: add reason argument.

Improve GitHub API scopes output.

audit: check the stable version does not decrease.

`-Wl,-z,defs` should be pruned out entirely since `-z defs` is not
understood by macOS's `ld`, and the analogue `-undefined error` is
already the default.

keg_relocate: include hard links and fix replacement ordering

These can be useful for later inspection or upload by `gist-logs` if
there's a failed install and it's unclear from logs alone what options
were used.

Used to provide a user-facing reason why this formula was boneyarded.

Improve the GitHub API scope and token related messaging by
autopopulating the scopes we need on the new scopes page and, in the
case of a lacking a scope we need, output what scope was required.

Also, DRY up the personal access token code.

This will prevent brew upgrade from working correctly.

audit: check test system calls are fully scoped.

audit: check for master branch tar/zipballs.

superenv: treat timingsafe_bcmp as weak on 10.11

Revert "audit: check the version does not decrease."

Move `test/vendor/bundle` to `vendor/bundle`.

This doesn't matter for everything but it does for the binaries that
are installed. Have a limited name/alias check when not installed and
a better one that iterates bin/sbin if installed.

These have unstable checksums and aren't the tagged, stable releases
we require.

audit: check the version does not decrease.

update-test: fix --to-tag failure on new tag.

hbc/auditor: refactor and fix bug

Without this updating to a tag will always have the same start commit
and end commit as there's been no updates to `master` since the tag was
created.

Xcode 8.1 added timingsafe_bcmp to string.h and libsystem_c.tbd,
and 10.12.1 added it to libsystem_c.dylib, but it is not present in
libsystem_c.dylib on 10.11.6 (15G1108).

It may appear in libsystem_c.dylib in a later 10.11 release or it may
be marked weak on 10.11 in a later Xcode release.

Fixes Homebrew/homebrew-core#6344.