Refactor: move CodeQL check logic to tools/codecome/checks.py

[pruiz]

Per PR #29 review feedback: check_codeql_status() in tools/codecome.py contains substantial domain logic. Move to tools/codecome/checks.py.