[analyzer] Mark getenv output as tainted.

Also, allow adding taint to a region (not only a symbolic value).

llvm-svn: 146532