Scope option constraints

- Keep subcommand-specific `depends_on:` rules from affecting sibling
  subcommands.
- Allow `brew bundle cleanup --zap` while requiring `--cleanup` for
  default `brew bundle --zap`.