WFO1000 Analyzer: False positives on private properties without InitializeComponent method

[KlausLoeffelmann]

The WFO1000 security analyzer flags private properties of components, which are not used for serialization. This results in false positives.

Example:

public class CustomControl1 : Control {
    public string? Value1 { get; private set; }
    public string? Value2 { get; internal set; }
}

Impact:
This affects custom controls and generates unnecessary warnings, hindering productivity.

Replaces a part of the Bug of #12476.

[KlausLoeffelmann]

Done, Merged and serviced to .NET 9.
@merriemcgaw FYI.