Add CodeQL to build process

[thompson-tomo]

Add codeql to the cicd pipeline to improve openssf score.

Sample is https://github.com/open-telemetry/community/blob/main/.github/workflows/codeql.yml

Languages should be:

• javascript-typescript
• python
• actions