CI: add CodeQL workflow test