Flag side effects in whitelisted methods that accept GET

New semgrep rule catches whitelisted methods that accept GET requests but have side effects (commits, sends email, enqueues jobs) that bypass CSRF protection.