ci(codeql): scan GitHub Actions workflows instead of absent JS/TS

The javascript-typescript matrix entry fails with 'no source code seen'
(exit 32, configuration error) — maa-framework has zero .js/.ts files.
Pre-existing latent failure on main, surfaced by this PR's run. Same fix
as oblibeny: analyze the 'actions' language (workflow YAML), which exists
and is a meaningful security surface.

https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ

Author: claude

.github/workflows/codeql.yml

@@ -31,7 +31,12 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - language: javascript-typescript
+          # maa-framework has no JavaScript/TypeScript source — the
+          # javascript-typescript extractor errors with "no source code seen"
+          # (exit 32, configuration error). CodeQL's GitHub Actions analysis
+          # scans the workflow YAML that does exist here, keeping this a
+          # meaningful security check (same fix as oblibeny's codeql.yml).
+          - language: actions
             build-mode: none
 
     steps: