Fix Sarif uploads

Currently there not being generated by another tool to be uploaded.

```bash
Run github/codeql-action/upload-sarif@v1.1.5
[23](https://github.com/arrow-kt/arrow-analysis/runs/5606778446?check_suite_focus=true#step:9:23)
Error: No SARIF files found to upload in "sarif".
[24](https://github.com/arrow-kt/arrow-analysis/runs/5606778446?check_suite_focus=true#step:9:24)
Error: No SARIF files found to upload in "sarif".
[25](https://github.com/arrow-kt/arrow-analysis/runs/5606778446?check_suite_focus=true#step:9:25)
at getSarifFilePaths (/home/runner/work/_actions/github/codeql-action/v1.1.5/lib/upload-lib.js:155:19)
[26](https://github.com/arrow-kt/arrow-analysis/runs/5606778446?check_suite_focus=true#step:9:26)
at Object.uploadFromActions (/home/runner/work/_actions/github/codeql-action/v1.1.5/lib/upload-lib.js:137:30)
[27](https://github.com/arrow-kt/arrow-analysis/runs/5606778446?check_suite_focus=true#step:9:27)
at run (/home/runner/work/_actions/github/codeql-action/v1.1.5/lib/upload-sarif-action.js:51:47)
[28](https://github.com/arrow-kt/arrow-analysis/runs/5606778446?check_suite_focus=true#step:9:28)
at async runWrapper (/home/runner/work/_actions/github/codeql-action/v1.1.5/lib/upload-sarif-action.js:69:9)
```

If we set up detekt or another 3rd party tool we can set-up aa step with:
```yaml
- name: Upload Code Scanning code analysis report
if: always()
uses: github/codeql-action/upload-sarif@v1
with:
sarif_file: 'build/reports/detekt/main.sarif'
```

Start with the GitHub Actions run linked in the issue and the github/codeql-action/upload-sarif@v1.1.5 step. Check whether a SARIF report is produced at build/reports/detekt/main.sarif or another reported path; done means the analysis report exists and the upload step completes without the no-files-found error.

Written by the indexing model from the issue text.