chore: configure codeql workflow

[conventional-commit-lint-gcf[bot]]

🤖 I detect that the PR title and the commit message differ and there's only one commit. To use the PR title for the commit history, you can use Github's automerge feature with squashing, or use automerge label. Good luck human!

-- conventional-commit-lint bot https://conventionalcommits.org/

[garethgeorge]

nit: perhaps squash your same-named commits into a single entry to keep our git history concise on merge.

[kenneth-rosario]

@garethgeorge That should get covered by squash and merge option after approval instead of using standard merge. Everything will get squashed and the title of the PR will get used as the commit message