Limit B614 to torch.load deserializers

[dibussoc]

Summary

• Fixed B614 false positives by matching only torch.load and torch.serialization.load.
• The new check uses an explicit allowlist, as opposed to checking 'torch.*.load', which will need to be updated if PyTorch adds additional pickle data deserializers—trade-off for reducing false positives.
• torch.serialization.load is covered by the same B614 logic as torch.load; no separate example added, but can be added if needed.
• Update docstrings to reflect the exact APIs and CWE.
• Add a non-triggering torch.utils.cpp_extension.load example to prevent regressions.

Testing

• tox run -e py310
• tox run -e pep8

Note: tox run -e cover fails locally due to missing coverage combine (pre-existing).

Resolves: #1343

[ericwb]

Looks mostly good, just recommend removing the unnecessary conditional in the unit test.

[ericwb]

This line really isn't needed.

[dibussoc]

Thanks for the correction, should be updated now.