Add custom workflow for CodeQL Analysis

[navyakhurana]

Changes

• Branch-Specific Execution
  Runs exclusively on main and dev branches for:

  • Push events
  • Pull requests targeting these branches

• JavaScript / TypeScript & GitHub Actions Analysis
  Expands coverage to include both application code and workflow definitions.

• Comprehensive Security Scanning
  Uses both security-extended and security-and-quality query suites for deeper vulnerability detection and maintainability insights.

• Scheduled Analysis
  Automatically runs every Monday at 06:00 AM UTC to proactively catch new issues.

• Optimized Build Process

  • Uses Node.js 18 with npm caching for faster builds
  • Installs dependencies using npm ci for reproducible environments
  • Utilizes CodeQL Autobuild for automatic compilation

• Post-Action Steps Added

  • Post CodeQL Analysis: Performs completion checks and cleanup
  • Post Initialize CodeQL: Ensures database integrity and proper setup
  • Post Checkout Repository: Logs verification summary with branch, commit, and language details

• Proper Permissions
  Configured with only the required permissions for reading code and writing security events.

Who should review your contribution? (Use @mention)

@cernus76

Checklist before submitting

• My commits are only for the reference architecture mentioned above.
• I have followed the folder structure in the main README

[github-actions]

Preview website is available here.

[github-actions]

Preview website is available here.

[github-actions]

Preview website is available here.

[github-actions]

Preview website is available here.

[github-actions]

Preview website is available here.