Adds a validation pass to check that the only thing you can do with hooks is call them. A follow-up PR (still early WIP) will check the other aspect of the rules of hooks, that they are not called conditionally. That's a more involved algorithm.