Create codeql-analysis.yml

[mr-c]

What: Enable https://codeql.github.com/ code scanning
Why: Good to detect problematic code patterns

How to test the changes?

(Select all options that apply)

• I've included appropriate automated tests.
• This is a refactoring of components with existing test coverage.
• Instructions for manual testing are as follows:

1. Examine https://github.com/galaxyproject/galaxy/security/code-scanning
   Example:
   

License

• I agree to license these contributions under Galaxy's current license.
• I agree to allow the Galaxy committers to license these and all my past contributions to the core galaxy codebase under the MIT license. If this condition is an issue, uncheck and just let us know why with an e-mail to galaxy-committers@lists.galaxyproject.org.