ci(codeql): add actions language to the analysis matrix

Clears Hypatia codeql_missing_actions_language; CodeQL now scans workflow files for vulnerabilities alongside javascript-typescript. Part of the tracked governance-hardening next-action (STATE.a2ml).

https://claude.ai/code/session_01BJmfoz1ZS1Pejy9LLMY742

Author: claude

.github/workflows/codeql.yml

@@ -33,6 +33,8 @@ jobs:
         include:
           - language: javascript-typescript
             build-mode: none
+          - language: actions
+            build-mode: none
 
     steps:
       - name: Checkout