[perl #103492] Give lvalue cx to (s)printf args

[perl #103492] Give lvalue cx to (s)printf args

Or potential lvalue context, like function calls.

The %n format code’s existence renders these two very much like func-
tion calls, as they can modify their arguments.

This allows sprintf("...%n", substr ...) to work.