Irql.qll updates to expand ability to detect function IRQL requirements

[jacob-ronstadt]

1. A function can be annotated with multiple When annotations that conditionally apply an IRQL annotation. For example, KeSetEvent has these annotations:

When(Wait==0, IRQL_requires_max(DISPATCH_LEVEL))
When(Wait==1, IRQL_requires_max(APC_LEVEL))
When(Wait==1, __drv_reportError("...")

The current Irql library did see any IRQL annotations for this. Updating the library so that it can parse When annotations for IRQL annotations.

2. Some functions are not properly annotated, but are used in a way that implies an IRQL requirement. Detection of these functions added to the IRQL library so that IRQL requirements for functions that are not annotated can be tracked by looking at the functions implicit role type based on how it's used.

Checklist for Pull Requests

• Description is filled out.
• Only one query or related query group is in this pull request.
• The version number on changed queries has been increased via the @version comment in the file header.
• All unit tests have been run: (Test README.md).
• Commands codeql database create and codeql database analyze have completed successfully.
• A .qhelp file has been added for any new queries or updated if changes have been made to an existing query.