Improve runtime-codeql pipeline to run more compliance tooling

[jkoritzinsky]

We recently moved our compliance tooling runs from the runtime official build to the runtime-codeql pipeline.

As part of this work, we discovered that tools like binskim aren't running on much of our outputs. We should adjust that pipeline as needed to ensure that we're getting full coverage of our compliance tooling in the runtime repo.

cc: @ericstj @jeffschwMSFT

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.