closure variable capturing bug

[attila-lendvai]

there's a major bug in lambda's capturing the wrong cell. it's present in every version and implementation.

IIRC, eval/closures/bug/1 is a reproducer of that.

i didn't understand well enough how cells are allocated and referenced, so i failed to fix it before i ran out of steam.