ci(codeql): cron weekly→monthly (cut 3, standards#233 Option B) (#101) #85

Job	Run time
governance / Language / package anti-pattern policy	10s
governance / Licence consistency	8s
governance / Code quality + docs	18s
governance / Guix primary / Nix fallback policy	7s
governance / Validate Hypatia baseline	6s
governance / Workflow security linter	9s
governance / Trusted-base reduction policy	11s
governance / Security policy checks	6s
governance / Well-Known (RFC 9116 + RSR)	9s
	1m 24s

Provide feedback