Fix CodeQL on GitHub Actions

[macrat]

No description provided.

[Copilot]

Pull Request Overview

This PR fixes CodeQL analysis in GitHub Actions by moving the CodeQL job from the reusable test workflow to the specific trigger workflows, ensuring CodeQL runs on all relevant events.

• Removes CodeQL job from the shared test.yaml workflow
• Adds CodeQL job to on-push-main.yaml and on-pull-request.yaml workflows
• Updates on-release.yaml to include CodeQL job and adds it as a dependency for the release job

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/test.yaml	Removes the CodeQL analyze job from the reusable test workflow
.github/workflows/on-release.yaml	Adds CodeQL job and updates release dependencies
.github/workflows/on-push-main.yaml	Adds CodeQL job for main branch pushes
.github/workflows/on-pull-request.yaml	Adds CodeQL job for pull request analysis

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.89%. Comparing base (aac2c74) to head (babd914).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #31   +/-   ##
=======================================
  Coverage   87.89%   87.89%           
=======================================
  Files          74       74           
  Lines        6466     6466           
=======================================
  Hits         5683     5683           
  Misses        644      644           
  Partials      139      139           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.