[CodeQL] Enable GitHub Actions Workflows security analysis

Reference:
https://github.blog/changelog/2025-04-22-github-actions-workflow-security-analysis-with-codeql-is-now-generally-available/

May need to update https://github.com/cli/cli/blob/trunk/.github/workflows/codeql.yml for the matrix stragety with `actions` and `go` as suggested here:

https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#changing-the-languages-that-are-analyzed

从 .github/workflows/codeql.yml 开始，并将其矩阵策略与链接的 GitHub 文档进行比较。检查矩阵是否包含用于 CodeQL 分析的 actions 和 go，然后验证 workflow 配置是否启用了 GitHub Actions workflow 安全分析。

由索引模型根据 Issue 内容生成。