advapi32/tests: Add a test to show that THREAD_QUERY_INFORMATION should grant THREAD_QUERY_LIMITED_INFORMATION.

When the malloc afterwards fails, release_object() is called.
atom_table_destroy() assumes that table->handles was properly initialized.

Based on a patch by Dmitry Timoshkov.

advapi32/tests: Add a test to show that PROCESS_QUERY_INFORMATION should implicitly grant PROCESS_QUERY_LIMITED_INFORMATION access.

This builds a menu but cannot display it yet.

This required some rethinking because menus and combo boxes don't
provide a way to "hide" items, just remove them, and native always
shows items in the order they were added even when hidden and shown.