[LifetimeSafety] Consider flowing origins through reinterpret_cast

```cpp
const int *bad(const int &x [[clang::lifetimebound]]) { // could not verify that the return value can be lifetime bound to 'x'
return (const int *)reinterpret_cast(&x); // clearly escapes
}
```

https://godbolt.org/z/nfqha7az6

Theoretically, we might need to tell the analyzer to assume it escapes regardless.