Specify/filter rules

For testing, linting, targeted large scale analysis, etc. it makes sense to only run specific rules. Currently this is done using the tag argument that supports one selector on all the rules meta fields.

Ideally, one could also run

• capa -r rules/nursery/ sample
• capa -r rule-with-dependency.yml
• etc.

The issue: in these cases dependency rules may be missing...

1. Should capa try to automatically resolve dependencies? Issue: where to look for these?
2. Otherwise, how do we specify/select/filter multiple rules for a run?
3. Most useful would be options to:
   a. filter by files, e.g. capa -r rules/ -<X> a.yml b.yml
   b. specify multiple tags, e.g. capa -r rules/ -t "get file size" "write file"

Happy to discuss if this is worth more effort or if the current workarounds suffice.

The issue does not name implementation files or tests; start by tracing the capa CLI handling for rule paths, tags, and dependencies. Review how rules in rules/nursery/ and rule-with-dependency.yml are loaded, then clarify the desired behavior for multiple selectors and missing dependencies. Done requires an agreed design and coverage for the selected rule and dependency cases.