Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors

[reginayap8]

Upgrade Pipeline Job Init@V4 to Fix 10 CodeQL Warnings and Errors in CodeQL Analysis

• You've read the Contributor Guide and Code of Conduct.
• You've included unit or integration tests for your change, where applicable.
• You've included inline docs for your change, where applicable.
• There's an open issue for the PR that you are making. If you'd like to propose a new feature or change, please open an issue to discuss the change or find an existing issue.

Summary of the changes (Less than 80 chars)

Description

Fix 10 CodeQL warnings in the pipeline analysis by setting the Github API permissions.

Solution: Add the following permissions in yaml file since they were missing and causing the pipeline check to fail.

• Upgrade CodeQL pipeline step from V3 to V4
• security-events: write — lets the action upload SARIF results and fetch feature flags from GitHub's API, which resolves the fallback warning.
• actions: read — allows the action to read its own feature flag configuration.
• contents: read — explicitly grants repo content access (best practice when listing multiple permissions).

Pipeline link to warnings
Link: https://github.com/AzureAD/microsoft-identity-web/actions/runs/23922732183

Fixes #{bug number} (in this specific format)