Security: Add CodeQL scanning for TypeScript code

[fro-bot]

Summary

This repository contains TypeScript source code but does not have CodeQL security scanning configured.

Recommendation

Add a .github/workflows/codeql-analysis.yaml workflow to enable security scanning. This aligns with org security standards.

Benefits

• Automated vulnerability detection
• Integration with GitHub Security tab
• Compliance with security best practices

Reference

See bfra-me/.github and bfra-me/renovate-action for examples of CodeQL configuration.

---

This issue was created by Fro Bot during org autohealing scan.