codeql: Enable test file extraction in CI workflow

Configure the CodeQL workflow to include test files during database
creation by setting CODEQL_EXTRACTOR_GO_OPTION_EXTRACT_TESTS=true.

This allows the unclosed-resources query to detect leaks in test files,
such as the missing Close() calls we found in files like
internal/archive/archive_test.go.

Without this setting, the Go extractor excludes *_test.go files by
default, limiting the query's effectiveness.

Assisted-by: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Arieh Schneier <15041913+AriehSchneier@users.noreply.github.com>

Author: AriehSchneier

.github/workflows/codeql.yml

@@ -43,6 +43,8 @@ jobs:
               - go-git
             queries:
               - uses: ./codeql/queries/unclosed-resources.ql
+        env:
+          CODEQL_EXTRACTOR_GO_OPTION_EXTRACT_TESTS: true
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4