chore: add codeql ci

[pi0]

🔗 Linked issue

#1490

❓ Type of change

• 📖 Documentation (updates to the documentation, readme, or JSdoc annotations)
• 🐞 Bug fix (a non-breaking change that fixes an issue)
• 👌 Enhancement (improving an existing functionality like performance)
• ✨ New feature (a non-breaking change that adds functionality)
• 🧹 Chore (updates to the build process or auxiliary tools and libraries)
• ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

📚 Description

Rebasing here since have no permission on other PR to push

📝 Checklist

• I have linked an issue or discussion.
• I have updated the documentation accordingly.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[codecov]

Codecov Report

Merging #1542 (fccd9dc) into main (fddf57e) will decrease coverage by 0.02%.
Report is 18 commits behind head on main.
The diff coverage is n/a.

❗ Current head fccd9dc differs from pull request most recent head 80daf47. Consider uploading reports for the commit 80daf47 to get more accurate results

@@            Coverage Diff             @@
##             main    #1542      +/-   ##
==========================================
- Coverage   76.25%   76.23%   -0.02%     
==========================================
  Files          73       73              
  Lines        7453     7524      +71     
  Branches      733      739       +6     
==========================================
+ Hits         5683     5736      +53     
- Misses       1769     1787      +18     
  Partials        1        1              

see 6 files with indirect coverage changes