Diff-informed queries via primary/secondary abstractions

[jbj]

trafficstars

This PR is a proof of concept for how diff-informed queries could be made more high level, reducing hard-to-remember design patterns and simultaneously reducing reverse dependencies and the "module soup" I proposed in #17846.

I've only implemented what's necessary for XSS.ql so far since I expect a lot of changes to names and APIs.