chore: Add CodeQL analysis workflow configuration

[zouguangxian]

No description provided.

[cursor]

PR Summary

Low Risk
Low risk: adds a new CI security scanning workflow without changing application/runtime code; main impact is additional GitHub Actions minutes and potential new code-scanning alerts.

Overview
Adds CodeQL code scanning via GitHub Actions. A new .github/workflows/codeql.yml workflow runs on pushes and PRs to main plus a weekly schedule, analyzing actions and rust with github/codeql-action and uploading results to GitHub Security tab.

^{Written by Cursor Bugbot for commit 0074bd0. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github/​actions/​checkout@​34e114876b0b11c390a56381ad16ebd13914f8d5

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}