feat(ci): add GitHub CodeQL security scanning workflow

[AnzalKhan16]

Summary

This pull request adds a GitHub CodeQL workflow to automate static application security testing (SAST) for the project.

The workflow enables continuous security scanning to help identify potential vulnerabilities and insecure coding patterns during development.

Changes Made

• Added a new GitHub Actions workflow: .github/workflows/codeql.yml

• Configured CodeQL to run on:

  • Pushes to the main branch
  • Pull requests targeting the main branch
  • Manual workflow dispatch

• Configured CodeQL to analyze the Go codebase.

• Aligned the workflow with the existing CI configuration by using the project's Go version and GitHub Actions conventions.

Benefits

• Detects security vulnerabilities early in the development lifecycle.
• Provides automated security feedback for every pull request.
• Improves code quality through continuous static analysis.
• Follows DevSecOps best practices with minimal maintenance overhead.

Testing

• Verified the workflow YAML syntax.
• Confirmed the workflow follows the repository's existing CI structure and Go version configuration.

Related Issue

Closes #232

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.