Update isEscape predicate to include incoming values

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: asgerf

unified/ql/lib/codeql/unified/internal/dataflow/CaptureSsa.qll

@@ -93,6 +93,8 @@ module CaptureSsaInput implements InputSig<Location, BasicBlock> {
   private predicate isEscape(BuilderNode node) {
     node.isResultValue(any(Argument arg).getValue())
     or
+    node.isIncomingValue(any(DataFlowCall call).asSetterCall())
+    or
     node.isImplicitArgument(_, _, _)
     or
     exists(U::Expr e |