Fix scan-build errors and the lack of them in the CI

Running meson test after scan-build means we lose the original scan-build logs, so our job always succeeds.

Fix that, and in the process fix the warnings scan-build complained about.