glibc voodoo moved to its own header to make it easy to drop once
we don't need it any more

malloc/free cluster of functions moved into their own sub-struct
pointer so they don't perturb the main capsule namespace struct
layout if/when they change (as we expect them to).

abstract out the arcane memory checks so that the new realloc
wrapper can share them with the free wrapper