caller_sites is not reliable

It's possible for `caller_sites` to return something that is NOT a call when accessing the IL of the returned code refs.

This should be fixed by adding a small amount of logic in:

https://github.com/Vector35/binaryninja-api/blob/dev/python/function.py#L3185-L3194

that verifies the LLIL is indeed a call