CPGHunter: LLM-guided semantic modeling for scalable vulnerability detection via taint analysis (EMSE, 2026)