CI: Enable the CodeQL workflow to run for PR updates

Not sure if I forgot to enable this or didn't want it, but I guess it's an opportunity to exercise the all-in-one build script.

.github/workflows/codeql.yml

@@ -1,9 +1,28 @@
 name: Semantic Analysis
 
 on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'changelog.lua'
+      - '.gitignore'
   schedule:
     - cron: '00 00 * * 6'
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   analyze:
     name: Scan with CodeQL