chore: add CodeQL Advanced security scanning workflow

[Prachig-Microsoft]

Purpose

This pull request introduces a new GitHub Actions workflow for CodeQL analysis, enabling automated security and code quality scanning for both JavaScript/TypeScript and Python code in the repository. The workflow is triggered on pushes, pull requests, and a weekly schedule, targeting relevant source and test files.

Security and Code Analysis Automation:

• Added a .github/workflows/codeql.yml workflow that runs CodeQL analysis for javascript-typescript and python using GitHub Actions, with triggers on push, pull request, and a scheduled weekly run.
• Configured the workflow to only analyze changes in relevant source and test file paths, optimizing performance and relevance.
• Set up the workflow matrix to support both languages with a no-build mode, and included documentation for extending to other languages or custom build steps if needed.

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

🎉 This PR is included in version 1.14.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀