Enable CodeQL

[kfcampbell]

Part of ensuring that each repo we work with in the octokit org and the terraform provider have CI checks that include a build step and a CodeQL step.

---

Behavior

Before the change?

• No code scanning was enabled.

After the change?

• CodeQL is enabled for the repo.

Other information

• N/A

---

Additional info

Pull request checklist

• Tests for the changes have been added (for bug fixes / features)
• Docs have been reviewed and added / updated if needed (for bug fixes / features)
• Added the appropriate label for the given change

Does this introduce a breaking change?

Please see our docs on breaking changes to help!

• Yes (Please add the Type: Breaking change label)
• No

If Yes, what's the impact:

• N/A

Pull request type

Please add the corresponding label for change this PR introduces:

• Bugfix: Type: Bug
• Feature/model/API additions: Type: Feature
• Updates to docs or samples: Type: Documentation
• Dependencies/code cleanup: Type: Maintenance

---