[LifetimeSafety] False-positive invalidation with lambda capturing a container

```cpp
#include
#include

void foo() {
std::vector v;
auto print = [&]() { std::cout << v.size(); };
v.push_back(0);
print();
}
```

This is because we currently consider even the reference to `v` (which is captured by the lambda) as invalidated after the `push_back`. We need granular paths to represent interior invalidations.

Start with the C++ reproducer and the LifetimeSafety invalidation analysis described in the issue. Trace how the lambda's reference to v is treated after v.push_back(0); done means interior invalidations are represented granularly so the subsequent print() is not falsely rejected, with regression coverage for this example.

Written by the indexing model from the issue text.