py/insecure-protocol missing urllib3 ssl_version tracking & false positive on secure defaults

1. The analysis only inspects standard SSL and pyOpenSSL module constructors and fails to detect insecure ssl_version arguments passed to widely used libraries like urllib3.PoolManager.
2. It seems ssl.create_default_context() is incorrectly flagged as vulnerable; it is the best default for the client as per the doc.

```python
import ssl
import socket
from urllib3.poolmanager import PoolManager

sock = socket.socket()

# FN: use urllib3 PoolManager with explicit insecure ssl_version
pool_mgr = PoolManager(ssl_version=ssl.PROTOCOL_TLSv1)

# FP: https://docs.python.org/3/library/ssl.html#ssl-security
ctx = ssl.create_default_context()
ctx.wrap_socket(sock, server_hostname='example.com')
```

從 py/insecure-protocol 查詢入口開始，並使用 Python 範例追蹤 SSL 版本引數的偵測方式。確認使用不安全 ssl_version 的 urllib3.PoolManager 會被回報，而 ssl.create_default_context() 不會，然後新增或更新相關的查詢測試。

由索引模型根據 Issue 內容生成。