add comprehensive m// and s/// taint tests

It turns out that taint in pattern matching and substitutions is
under-tested and buggy. Add lots of new tests to try and cover most
permutations.  Several tests are TODO for now, but should get fixed by
commits to follow shortly.