UI5: Address join order issues with inSameWebApp

Applying inSameWebApp too early in the pipeline was causing a
cross-product on all data flow nodes in a WebApp. It's typically
better to apply the other conditions (e.g. name matching), then
filter on the same web-app as a final step.

Author: lcartey

javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5.qll

@@ -78,6 +78,8 @@ class WebAppManifest extends File {
   WebApp getWebapp() { result = webapp }
 }
 
+bindingset[f1, f2]
+pragma[inline_late]
 predicate inSameWebApp(File f1, File f2) {
   exists(WebApp webApp | webApp.getAResource() = f1 and webApp.getAResource() = f2)
 }