Add FIXME comment about unsafe API in CodeModel::items

The function does mutex locking internally and then returns
a raw pointer which could become invalid without the mutex being
locked. This should be revised eventually.