Pin CodeQL workflow dependencies

[fxamacker]

Closes #362

Pinned all the CodeQL workflow dependencies.

This doesn't create manual maintenance chore because dependabot can automatically update pinned versions like this:

• https://github.com/fxamacker/cbor/pull/487/files

---

• [x] Targeted PR against main branch
• [x] Linked to Github issue with discussion and accepted design OR link to spec that describes this work
• [x] Code follows the standards mentioned here
• [x] Updated relevant documentation (code comments)
• [x] Re-reviewed Files changed in the Github PR explorer
• [x] Added appropriate labels

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (1e6ec55) 64.93% compared to head (0267332) 65.05%.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #363 +/- ## ========================================== + Coverage 64.93% 65.05% +0.12% ========================================== Files 14 14 Lines 8811 8811 ========================================== + Hits 5721 5732 +11 + Misses 2356 2345 -11 Partials 734 734 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.