Add CodeQL config file

[eskour]

Add a separate configuration file codeql-config.yml, which:

• Tells the code scanning to ignore specific paths
• Include both security and quality code improvements