Implement error bounds in hybrid KPM

Right now we don't control the KPM errors, and expect that the user requests a sufficient number of moments. A better solution would be checking the residue of the Sylvester equation, and adding KPM moments as necessary.