in `clang-analyzer`, `StackAddressEscape` has problems with user-declared destructors

The following code:

```c++
struct A {
int& x;
};

struct B {
A a;
~B() {}
B(A a) : a{a} {}
};

static B getA() {
int x;
return B{A{.x = x}};
}
```

incorrectly passes clang tidy with `--checks=clang-analyzer-core.StackAddressEscape`.

However, this very similar code correctly triggers the warning.

```c++
struct A {
int& x;
};

struct B {
A a;
B(A a) : a{a} {}
};

static B getA() {
int x;
return B{A{.x = x}};
}
```

Start by running the two C++ reproductions with clang-tidy using clang-analyzer-core.StackAddressEscape, then compare the warning paths for the versions with and without the user-declared destructor. Trace the StackAddressEscape checker entry point and its existing tests; done means the destructor case reports the escaping stack address without regressing the existing case.

Written by the indexing model from the issue text.