Fix: hand the pvIsTainted flag down properly when requerying from a partially satisfying store
Fix a couple of trivial bugs, plus differentiate close instructions as interpreted by the forward is-vfs-op-dead walk from the backward find-vfs-predecessor one.