Provide a more sensible "path end value" for access paths based on load instructions

Before it used the address of the loaded value; now it uses the result
of the load instruction.
Also be more careful with the end type of store-based access paths