No error when passing an user-controlled array into an extract call

[cgocast]

Psalm raises no error when analysis this sample : https://psalm.dev/r/5738c5401d

Documentation about extract function warns : "Do not use extract() on untrusted data, like user input (e.g. $_GET, $_FILES)."

I'll write a PR to fix this issue.

[psalm-github-bot]

I found these snippets:

https://psalm.dev/r/5738c5401d

<?php //--taint-analysis

$array = $_GET;
extract($array);

Psalm output (using commit 5095f4e):

No issues!

[weirdan]

Fixed in #10417