chore: Use explicit workflow for codeql instead of automatic scans

[zkoppert]

Pull Request

This should reduce the number of times we have all checks passing but codeql doesn't work and we cant merge a pr without bypassing security requirements.

Proposed Changes

This pull request introduces a new GitHub Actions workflow for advanced CodeQL analysis. The most important changes include setting up the workflow to run on specific events, configuring the job matrix for Python, and integrating the CodeQL tools for scanning.

Readiness Checklist

Author/Contributor

• If documentation is needed for this change, has that been included in this pull request
• run make lint and fix any issues that you have introduced
• run make test and ensure you have test coverage for the lines you are introducing
• If publishing new data to the public (scorecards, security scan results, code quality results, live dashboards, etc.), please request review from @jeffrey-luszcz

Reviewer

• Label as either fix, documentation, enhancement, infrastructure, maintenance or breaking

Copilot reviewed 1 out of 1 changed files in this pull request and generated no suggestions.

Tip: Copilot code review supports C#, Go, Java, JavaScript, Markdown, Python, Ruby and TypeScript, with more languages coming soon. Learn more

[zkoppert]

CodeQL analyses from advanced configurations cannot be processed when the default setup is enabled Well thats a fail. Looks like the feature isn't going to consistently work for us.