Write a custom Semgrep rule to track a real taint path

When the codebase has a project-specific source or sink, a five-line taint rule finds every instance faster than reading files.