gha: enable CodeQL scanning

[cyphar]

No description provided.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 46.49%. Comparing base (e597e6a) to head (094e766).
Report is 3 commits behind head on main.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

❗ There is a different number of reports uploaded between BASE (e597e6a) and HEAD (094e766). Click for more details.

HEAD has 10 uploads less than BASE

Flag	BASE (e597e6a)	HEAD (094e766)
linux	6	1
integration	5	0

Additional details and impacted files

@@             Coverage Diff             @@
##             main     #559       +/-   ##
===========================================
- Coverage   73.70%   46.49%   -27.22%     
===========================================
  Files          60       60               
  Lines        4906     4906               
===========================================
- Hits         3616     2281     -1335     
- Misses        941     2358     +1417     
+ Partials      349      267       -82     

see 33 files with indirect coverage changes