Extend call counting allowances

[cgranade]

Is your feature request related to a problem? Please describe.
With #302, new allowance operations were introduced to enforce that a given operation is called at most a given number of times. As per @tcNickolas' feedback, it would be good to extend these allowances in a few ways:

• Keep running after allowances fail until adjoint-allowance is hit, so to give better diagnostic data about where disallowed calls occur.
• Support allowing lists of related operations rather than individual operations.
• Provide more meaningful output when number of allowed calls is zero; possibly even a shorthand DenyOperation.

[guenp]

New bug filed related to this operation : #386