Add CodeQL analysis workflow configuration

[TaprootFreak]

Release Checklist

Pre-Release

• Check migrations
  • No database related infos (sqldb-xxx)
  • Impact on GS (new/removed columns)
• Check for linter errors (in PR)
• Test basic user operations (on DFX services)
  • Login/logout
  • Buy/sell payment request
  • KYC page

Post-Release

• Test basic user operations
• Monitor application insights log

[github-actions]

🤖 PR Review Bot

⚠️ Non-Conventional Commits (1)

The following commits don't follow conventional commit format:

• 5d78342 Add CodeQL analysis workflow configuration

Expected: type(scope): description
Types: feat, fix, refactor, test, ci, docs, chore, perf, style, build, revert

---

⚠️ Security: 0 critical, 67 high vulnerabilities

---

_{This is an automated review. Please address the issues above.}