add CodeQL Github Action

[carlsonp]

What this PR does / why we need it:

This adds a Github Action for CodeQL. It integrates well since it's from Github. It helps in checking for security vulnerabilities.

Will be a no-op for code and documentation.

Which issue(s) this PR closes:

Special notes for your reviewer:

Suggestions on how to test this:

Does this PR introduce a user interface change? If mockups are available, please link/include them here:

Is there a release notes update needed for this change?:

Additional documentation:

[scolapasta]

If you are still interested in this PR, can you please merge and resolve any merge conflicts with the latest from develop? If so, we can prioritize reviewing and QAing the changes. If we don’t hear from you by May 22, 2024, we’ll go ahead and close this PR (it can always be reopened after that date, if there is still interest).

[carlsonp]

Rebased onto develop branch

[bencomp]

Hooray for code quality tools integration! I hope this PR will be merged, and/or #9847. (I'm not really involved, but have been a proponent of cleaning up the code base for years.)

However, https://github.com/IQSS/dataverse/actions/runs/8842621992 says that the autobuild failed and to update the used actions. Could you have a look at the suggestions?

[cmbz]

2024/11/18: @ofahimIQSS please review and decide how we can move it forward. Thanks!