fix(java): recognize SharedSessionContract in hibernate-sqli

[Eljees]

Addresses case 1 of #3817.

Problem

hibernate-sqli only tracks a dynamic query when the receiver is typed as org.hibernate.Session. The same HQL executed through a SharedSessionContract is missed:

SharedSessionContract session = sessionFactory.openSession();
String hql = "from UserEntity where name = '" + input + "'";
session.createQuery(hql);   // not flagged before this change

SharedSessionContract is the common supertype of Session and StatelessSession and is a normal declared type for a session handle, so createQuery / createSQLQuery called on it is the same sink.

Change

Adds SharedSessionContract next to Session in the receiver-type alternatives, for both the local-variable and method-parameter shapes. All the existing guards (the "..." + "..." exclusions, the createQuery|createSQLQuery method filter) apply unchanged, so a constant query on a SharedSessionContract is still not flagged.

The StringBuilder case from the issue is intentionally left out: tracking a query assembled via StringBuilder.append(...).toString() needs more than a receiver-type addition (and my first attempt at a pattern-inside for it made the rule fail to parse), so it's better handled as a separate change than bundled in loosely here.

Tests

hibernate-sqli.java gains a testSharedSessionContract method with the reproducer as ruleid and a constant query as ok.

semgrep --test --config java/lang/security/audit/sqli/hibernate-sqli.yaml java/lang/security/audit/sqli/hibernate-sqli.java
1/1: ✓ All tests passed