chore: perform CodeQL scan on actions

[vil02]

This PR configures the CodeQL scan to take care of the potential vulnerabilities in the github actions. When this will be merged, 5 security alerts will be created in security/code-scanning. I will take cake of them (they are all related to setting permissions, the fix is similar to vil02/adv_2024#184).

Continuation of #4966.

• I have read CONTRIBUTING.md.
• This pull request is all my own work -- I have not plagiarized it.
• All filenames are in PascalCase.
• All functions and variable names follow Java naming conventions.
• All new algorithms have a URL in their comments that points to Wikipedia or other similar explanations.
• All new code is formatted with clang-format -i --style=file path/to/your/file.java

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 74.17%. Comparing base (13d8a28) to head (430fc3c).

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #6309      +/-   ##
============================================
+ Coverage     74.14%   74.17%   +0.03%     
- Complexity     5360     5362       +2     
============================================
  Files           678      678              
  Lines         18686    18686              
  Branches       3625     3625              
============================================
+ Hits          13854    13860       +6     
+ Misses         4275     4272       -3     
+ Partials        557      554       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[vil02]

Regarding infer: should we... disable it for now?