Java: Add JMS sink to java/unsafe-deserialization

java/ql/test/query-tests/security/CWE-502/ObjectMessageTest.java

@@ -0,0 +1,9 @@
+import javax.jms.Message;
+import javax.jms.MessageListener;
+import javax.jms.ObjectMessage;
+
+public class ObjectMessageTest implements MessageListener {
+    public void onMessage(Message message) {
+        ((ObjectMessage) message).getObject(); // $ unsafeDeserialization
+    }
+}