Improve CI security posture: add CodeQL & zizmor workflows, fix dependabot config#725

potiuk merged 6 commits into

apache:mainapache/infrastructure-actions:mainfrom

kevinjqliu:kevinjqliu/improve-security-posturekevinjqliu/infrastructure-actions:kevinjqliu/improve-security-postureCopy head branch name to clipboard