Fix CodeQL to run only once per workflow

[ranisalt]

Pull Request Prelude

• [x] I have followed proper The Forgotten Server code styling.
• [x] I have read and understood the contribution guidelines before making this PR.
• [x] I am aware that this PR may be closed if the above-mentioned criteria are not fulfilled.

Changes Proposed

CodeQL currently is running for all builds in the matrix, but it's meant to be run only once per commit because the syntax is incorrect