Update codeql.yml and scorecards.yml allowed-endpoints

[Odraxs]

In this pull request, we are making a change to the allowed endpoints configuration.

The updated allowed-endpoints configuration now includes the following endpoints:

codeqlyml

• api.github.com:443:
• *.githubapp.com:443:
• *.githubusercontent.com:443:

scorecards.yml

• bestpractices.dev:443
• *.storage.googleapis.com:443

Update harden runner