C++: Add two more fopen-like models.

[MathiasVP]

Just found two fopen-like models that we didn't model. See here.

[Copilot]

Pull request overview

Adds models for the Windows CRT functions _sopen_s and _wsopen_s to the existing Fopen family of modeled functions, so the filename parameter is treated as a buffer read and tainted flow propagates from filename to the output file descriptor parameter.

Changes:

• Extend the Fopen class predicate to recognize _sopen_s and _wsopen_s.
• Add a parameterIsRead case marking parameter index 1 as a buffer for these two functions.
• Add a hasTaintFlow case routing taint from isParameterDeref(1) to isParameterDeref(0).

Show a summary per file

File	Description
cpp/ql/lib/semmle/code/cpp/models/implementations/Fopen.qll	Adds _sopen_s / _wsopen_s recognition, buffer-read modeling for the filename parameter, and taint flow to the output fd parameter.

Copilot's findings

• Files reviewed: 1/1 changed files
• Comments generated: 0

[geoffw0]

LGTM.