Extends the analysis in py/modification-of-default-value to use taint tracking. This enables us to detect modifications that happen inside other function calls.

@felicity-semmle for the change note. (And also possibly the alert message?)

Open question:

I have encountered the following idiom in some places that are flagged by the current query

def foo(x=[]):
    if not x:
        x = [1]
    # ... more statements, none of which modify x

Should we treat if not x as a sanitiser for x? As far as I can tell, there are no hidden surprises in the above code.