update rule collection to use create-or-open-file.yml

[mike-hunhoff]

We recently added: https://github.com/fireeye/capa-rules/blob/3b4377aabb0734966b720088db89f002681558d7/lib/create-or-open-file.yml#L1-L18

Let's update the rule collection where possible to use the above lib rule.