feat(go): Add variable_matcher executor

[shivasurya]

Implements variable_matcher executor that searches for variable references in callgraph arguments. Supports exact matching and wildcards (user_*, *_input, data) with IsVariable filtering to exclude literals.

[shivasurya]

• feat(cli): Implement scan, query, and ci commands with Python DSL integration #361
• feat(go): Add DSL rule loader and OWASP Top 10 examples #360
• feat(go): Add dataflow integration for taint analysis #359
• feat(go): Add variable_matcher executor #358 👈 (View in Graphite)
• feat(go): Add call_matcher executor #357
• feat(python): Add logic operators (And, Or, Not) #356
• feat(python): Add Phase 2 propagation and presets #355
• feat(python): Add dataflow analysis with Phase 1 propagation #354
• feat(python): Add core matchers (calls, variable) #353
• feat(go): Remove ANTLR/expr-lang query system #352
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[codecov]

Codecov Report

❌ Patch coverage is 70.27027% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.71%. Comparing base (138989c) to head (7dcc6d7).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
sourcecode-parser/dsl/variable_matcher.go	74.28%	6 Missing and 3 partials ⚠️
sourcecode-parser/dsl/ir_types.go	0.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #358      +/-   ##
==========================================
- Coverage   80.77%   80.71%   -0.07%     
==========================================
  Files          61       62       +1     
  Lines        6289     6326      +37     
==========================================
+ Hits         5080     5106      +26     
- Misses        999     1007       +8     
- Partials      210      213       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[safedep]

SafeDep Report Summary

No dependency changes detected. Nothing to scan.

_{This report is generated by SafeDep Github App}

[shivasurya]

Merge activity

• Nov 10, 4:23 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Nov 10, 4:34 AM UTC: Graphite rebased this pull request as part of a merge.
• Nov 10, 4:35 AM UTC: @shivasurya merged this pull request with Graphite.