Investigate analyzer behavior for attribute property assignment

We need to make sure analyzer produces the correct warnings when assigning to a property in an attribute instance. For example, when assigning `typeof(Foo)` to an annotated property in an attribute instance, we should be producing warnings about reflection access to `Foo`'s annotated members. I am not sure if we have tests for this at the moment (there are some tests in `AttributePropertyDataflow` but they don't seem to check for warnings).

This tracks the TODO mentioned here:
https://github.com/dotnet/linker/blob/36b61348be2b93f2add8886174f19c0ed4aacd36/src/ILLink.RoslynAnalyzer/DataFlow/LocalDataFlowVisitor.cs#L123