Add CodeQL workflow for vulnerability scanning

[AmarYasser1]

This PR adds a GitHub Actions CodeQL workflow to automatically
scan the CLI codebase for known security vulnerabilities
on push and pull requests.

• Uses the official GitHub CodeQL action
• Scans Go code based on the version in go.mod
• Includes concurrency handling to prevent multiple runs

Closes #158

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[thelovekesh]

need to fix few things, rest looks good.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[thelovekesh]

just there. 2 more comment to address and we are good.

[thelovekesh]

thanks @AmarYasser1. pr is merged 🎉

[AmarYasser1]

@thelovekesh Thanks a lot! Happy to contribute.