CI: add CodeQL workflow tests