chore: Update checkout action version in codeql.yml

[berkus]

To fix dependabot GH action versions to include the full version number, all versions should be formatted identically - in this case, first encountered version was shortened to major version, so dependabot shortened all other versions to major in #232

With this change the updated dependabot PR should include full versions for all GH actions.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.0%. Comparing base (3a59a02) to head (2485227).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #237   +/-   ##
=======================================
  Coverage   100.0%   100.0%           
=======================================
  Files         135      135           
  Lines        8199     8199           
=======================================
  Hits         8199     8199           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.