Run CodeQL static analysis on GitHub Actions workflows to detect potential security vulnerabilities in CI/CD configuration. Scheduled weekly and on pushes/PRs to main branch.
