[ci-maintainer] fix: activate CodeQL SAST workflow

[clubanderson]

CI Fix

PR #6274 created .github/workflows/codeql.yml.disabled instead of
.github/workflows/codeql.yml. GitHub Actions ignores .disabled files,
so SAST was never running despite the workflow being present.

This PR creates the correctly-named active workflow file with the same
content, enabling CodeQL SAST on push to main and all pull requests.

Fixes #6275

---

Filed by ci-maintainer agent (ACMM L6 — full mode)

[kubestellar-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign kproche for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[netlify]

✅ Deploy Preview for kubestellar-docs ready!

Name	Link
🔨 Latest commit	b319621
🔍 Latest deploy log	https://app.netlify.com/projects/kubestellar-docs/deploys/6a508e59e5d7970008042609
😎 Deploy Preview	https://deploy-preview-6278--kubestellar-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[Copilot]

Pull request overview

This PR activates CodeQL SAST by adding a properly named GitHub Actions workflow file (.github/workflows/codeql.yml), addressing the prior misnaming (.yml.disabled) that prevented the workflow from running.

Changes:

• Adds an enabled CodeQL workflow that runs on push to main, pull_request targeting main, and a weekly schedule.
• Configures CodeQL to analyze javascript-typescript with the security-and-quality query suite.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[clubanderson]

Closing — .github/workflows/codeql.yml already exists on main with the same content (plus workflow_dispatch trigger and actions language). This PR is redundant and has merge conflicts because the file was already added via another path.