False positive on "Query built by concatenation with a possibly-untrusted string" - "java/concatenated-sql-query"

False positive on `Query built by concatenation with a possibly-untrusted string` - `java/concatenated-sql-query`
* https://github.com/github/codeql/blob/ff0c1ca2d6401e63914f20b650b49c2b82cac148/java/ql/src/Security/CWE/CWE-089/SqlConcatenated.ql

We have a constant value from enum
```
public enum CommentType {

REVIEW_SIMPLE_COMMENT("comment.review.simple"),
SIMPLE_COMMENT("comment.simple");

private final String type;

private CommentType(String type) {
this.type = type;
}

public String getType() {
return this.type;
}
}
```
Used in query
```
sql.append(" AND REVIEW_COMMENT.COMMENT_TYPE = '").append(CommentType.REVIEW_SIMPLE_COMMENT.getType()).append("') ");
```
And CodeQL is stating `Query built by concatenation with a possibly-untrusted string` in `CommentType.REVIEW_SIMPLE_COMMENT.getType()`. From my understanding the enum is immutable. Could you take a look?

從 java/ql/src/Security/CWE/CWE-089/SqlConcatenated.ql 開始，使用提供的 enum 與 SQL 建構範例重現該報告。追蹤 query 如何將衍生自 enum 的值分類為可能不受信任，然後判斷該範例是否仍應被報告。對於此案例，false positive 行為獲得解決或有明確的理由說明，即視為完成。

由索引模型根據 Issue 內容生成。