Add binding between annotation and sink-param.

In below case, the rule MyBatisAnnotationSqlInjection.ql will find a vulnerability at parameter name in function testParamAnno1(). That is false positive.

@Select("select * from user_info where name = #{name} and age = ${age}")
String testParamAnno1(@Param("name") String name, Integer age);

@Select("select * from user_info where age = #{age}")
String testParamAnno2(@Param("age") String age);

The root cause is, isMybatisXmlOrAnnotationSqlInjection() find annotation @Param in testParamAnno2() and bind it to ${age} in @Select("select * from user_info where name = #{name} and age = ${age}") when processing parameter name in testParamAnno1(). So it raise a vulnerability to name when it saw ${age} binding with @Param("age").