[clang] [analyzer] Harden security.cert.env.InvalidPtr checker fn matching (PR #88536)

[Balazs Benics via cfe-commits]

steakhal wrote:

The `dyn_cast` fix was committed as e096c144921daba59963f15e89d2ca6fb32d3a78.
The CDM:CLibrary matching mode is committed right after that as 024281d4d26344f9613b9115ea1fcbdbdba23235.

I'll propose the `dyn_cast` patch for backporting, but leave the other.

https://github.com/llvm/llvm-project/pull/88536