bind names in JS/TS destructuring patterns (silent slice under-approximation)

[samiujan]

Fixes a silent soundness bug in rgctl-analysis def-use. Based on main (8f09655).

collect_pattern_defs did not recognise the JS/TS destructuring pattern node kinds, so a destructured name was never recorded as defined. rgctl slice therefore under-approximated silently — a well-formed slice with a plausible reduction_percent, missing the destructuring statement, with nothing indicating a dependence had been dropped.

export function pick(src: { a: number; b: number }) {
  const { a, b } = src;   // line 2 — binds a and b
  const total = a + b;    // line 3
  return total;
}

slice src/d.ts --line 3 --variable total --function pick
  before: { "lines": [3], "edges": [] }
  after:  { "lines": [2, 3], "edges": [...] }

Array destructuring failed the same way; a plain const base = 10; control was already correct, which isolates the gap to destructuring.

Cause: an unrecognised pattern reached the catch-all arm, which delegates to collect_def_use_node, whose own final fallback pushes children with is_def_target = false — so destructured names were walked as uses. shorthand_property_identifier_pattern was not in the shared-identifier arm either.

Fix: add object_pattern/array_pattern (recurse), pair_pattern (recurse into value only — key is a property name), object_assignment_pattern/assignment_pattern (recurse into left only — right is a default that is read), and shorthand_property_identifier_pattern (bind its own text). Widen is_binding_pattern, which guards the routing arm.

Not confined to slice: reaching definitions, the PDG, taint and wl_hash.rs all inherit def-use.

Verified: 6 new regression tests (shorthand, array, renaming, nested, rest, default) plus the full rgctl-analysis suite — 365 passed, 0 failed. fmt and clippy add no new findings. End-to-end confirmed on the fixture above.

Fixes #113. (Opening on sshaaf/rgctl, where #113 resolves to the reported issue, so the keyword
links and auto-closes it. This branch is also staged in the fork as samiujan#2, where the same
keyword would point at a fork-local issue that does not exist.)