Add advanced CodeQL workflow for analysis

[lisagorewitdecker]

No description provided.

[lisagorewitdecker]

@copilot fix all security vulnerabilities associated with this PR, please.

[Copilot]

Pull request overview

Adds a new GitHub Actions workflow to run “advanced” CodeQL code scanning as part of the repo’s security automation.

Changes:

• Introduces a new CodeQL workflow (codeql-advanced.yml) configured for push/PR and scheduled runs.
• Expands the CodeQL language matrix to include actions alongside javascript-typescript.
• Uses a newer actions/checkout major version in this workflow.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

@copilot fix all security vulnerabilities associated with this PR, please.

Fixed in commit Fix codeql-advanced.yml: rename workflow, target dev branch, fix checkout version, use unique SARIF category. The following issues were addressed:

• Duplicate workflow name: Renamed to "CodeQL Advanced Analysis" to distinguish it from codeql.yml in the Actions UI.
• Wrong target branch: Changed development → dev so push/PR events actually trigger this workflow.
• Invalid action version: Fixed actions/checkout@v7 (non-existent) to @v4.
• SARIF category collision: Changed category from /language:<lang> to advanced/language:<lang> so uploads from this workflow don't overwrite results from codeql.yml.