chore: group codeql action dependabot updates (#23561)

see recent dependabot PRs

- #23553
- #23552

seems these updates should be done together and not separate PRs; add a
group to the config to enable this

Author: Jefffrey

.github/dependabot.yml

@@ -68,6 +68,10 @@ updates:
       interval: "weekly"
     open-pull-requests-limit: 10
     labels: [auto-dependencies]
+    groups:
+      codeql-actions:
+        patterns:
+          - "github/codeql-action/*"
   - package-ecosystem: "pip"
     directory: "/docs"
     schedule: