fix(codeql): add build-mode manual, upgrade setup-msbuild to v3, skip vendor downloads

[Copilot]

The "Analyze (cpp)" CodeQL job was failing with configuration_error on PRs due to three issues in the workflow.

Root cause

codeql-action v4 defaults build-mode to undefined for C/C++ when not specified. On PRs, it attempts to use overlay database mode (requires build-mode: none), fails, and falls back — but this inconsistency causes GitHub's SARIF processing to return configuration_error almost immediately after upload.

Changes

• build-mode: manual added to Initialize CodeQL — explicitly declares the manual MSBuild compilation, prevents the overlay-mode fallback that triggers the configuration error
• microsoft/setup-msbuild@v2 → @v3 — v2 runs on Node.js 20 which GitHub removes June 16, 2026; v3 (released March 2026) uses Node 24
• -NoVendor added to build command — skips downloading vendor archives (git-for-windows, clink, conemu-maximus5, etc.) during CodeQL tracing; only C++ compilation is relevant to the analysis

- name: Initialize CodeQL
  uses: github/codeql-action/init@v4
  with:
    languages: ${{ matrix.language }}
    build-mode: manual       # ← added

- name: Add MSBuild to PATH
  uses: microsoft/setup-msbuild@v3  # ← was @v2

- name: Build Cmder Launcher
  run: .\build.ps1 -Compile -NoVendor -verbose  # ← added -NoVendor

[Copilot]

Pull request overview

This PR updates the repository’s CodeQL (C/C++) workflow to prevent configuration_error failures on PRs by making the build strategy explicit and modernizing the MSBuild setup used during tracing.

Changes:

• Explicitly sets CodeQL build-mode: manual for the C/C++ analysis job.
• Upgrades microsoft/setup-msbuild from @v2 to @v3 (newer Node runtime support).
• Runs the build script with -NoVendor to skip vendor downloads during CodeQL tracing.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.