chore: group github/codeql-action/* Dependabot updates

[MattIPv4]

cc #984 #982

[cursor]

PR Summary

Low Risk
Configuration-only Dependabot grouping with no runtime or security logic changes.

Overview
Adds a codeql Dependabot group under the github-actions ecosystem so bumps to github/codeql-action/* (e.g. init and analyze in codeql.yml) land in one PR instead of separate ones.

This mirrors the existing npm grouping pattern and only changes .github/dependabot.yml.

^{Reviewed by Cursor Bugbot for commit a2d06c1. Bugbot is set up for automated code reviews on this repo. Configure here.}

[Copilot]

🟢 Ready to approve

The change is a small, valid Dependabot grouping configuration update with no apparent functional or structural issues.

This review doesn't count toward merge requirements. Sign up for the private preview to control whether Copilot approvals count.

Pull request overview

This PR updates the repository’s Dependabot configuration to group related github/codeql-action/* GitHub Actions updates into a single grouped Dependabot PR, consolidating the updates referenced in #984 and #982.

Changes:

• Add a Dependabot group named codeql for the github-actions ecosystem.
• Configure the group to match github/codeql-action/* dependencies via a pattern.

File summaries

File	Description
.github/dependabot.yml	Adds a codeql Dependabot group to combine github/codeql-action/* GitHub Actions updates into one PR.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 0
• Review effort level: Lite

We're testing this review assessment. Please use 👍 or 👎 to tell us if it's correct.