fix(pr-template): resolve F-04 audit finding (#8)

* fix(pr-template): resolve F-04 - Repositories do not inherit structured issue and PR intake

* ci: switch codeql analysis from javascript to actions

Org profile repo has no JavaScript; scan the GitHub Actions workflows instead.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Kim Harjamäki <kim.harjamaki@prosimo.fi>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,8 +1,14 @@
-## Description
+## Intent
 <!-- Describe your changes -->
 
-## SDLC Verification
+## Risk And Safety
+<!-- Describe any risks and safety measures -->
+
+## Verification
 - [ ] Code follows CAS architecture (`AGENTS.md`)
 - [ ] Tested via `gsd-verify-work`
 - [ ] No embedded secrets or credentials
 - [ ] Passed `gsd-code-review`
+
+## Rollback
+<!-- Describe rollback plan -->

.github/workflows/codeql.yml

@@ -15,7 +15,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'javascript' ]
+        language: [ 'actions' ]
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4