Build components in CodeQL pipeline

[helsaawy]

Need to build binaries for CodeQL to work:

For the compiled languages C/C++, C#, Go, Java, and Swift, the process of populating
this database involves building the code and extracting data.

https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#about-the-codeql-analysis-workflow-and-compiled-languages

Without explicit build commands between CodeQL init and analyze steps, CodeQL will attempt to automatically build go code using the following logic:
https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#autobuild-for-go

This can be see in the CodeQL Analyze step in out pipelines:

Attempting to automatically build go code
  Autobuilder was built with go1.21.3, environment has go1.20.10
  LGTM_SRC is /home/runner/work/hcsshim/hcsshim
  Found go.mod, enabling go modules
  Import path is 'github.com/microsoft/hcsshim'
  Makefile found.
  Trying build command make []
  make: *** No rule to make target 'base.tar.gz', needed by 'out/initrd.img'.  Stop.
  Running /usr/bin/make failed, continuing anyway: exit status 2
  Build failed, continuing to install dependencies.
  Skipping dependency installation because a Go vendor directory was found.
  Running extractor command '/opt/hostedtoolcache/CodeQL/2.15.2/x64/codeql/go/tools/linux64/go-extractor [-mod=vendor ./...]' from directory '.'.
  <...>

Rather than rely on autobuild, explicitly configure CodeQL and build necessary targets.

Skip running CodeQL on PRs if no code is changed.

Based on guidance from:
https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning
and workflow:
https://github.com/github/codeql/blob/0342b3eba242476cea815e601942021092d0bc10/.github/workflows/codeql-analysis.yml

[anmaxvl]

Thanks!

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.