nir: Support deref instructions in loop_analyze