fix(ci): force java CodeQL builds to rerun

[trancee]

Summary

• fix the failing CodeQL java-kotlin job from run 26711227335
• force the Java/Kotlin manual build step to bypass Gradle task output reuse
• keep the task list scoped so the job stays faster than a full build

Why

The failing run finalized the CodeQL database with:

CodeQL detected code written in Java/Kotlin but this run didn't build any of it

The Gradle step was satisfying compilation work from cached outputs (FROM-CACHE / UP-TO-DATE), which means CodeQL could not observe real compiler invocations.

Verification

• yamllint -c .yamllint.yml .github/workflows/codeql.yml
• local Gradle verification of the CodeQL build command with --rerun-tasks --no-build-cache showed compile tasks executing instead of FROM-CACHE