fix(ci): repair CodeQL workflow (invalid YAML + drop beta-Rust leg) (#133)

## What

`.github/workflows/codeql.yml` had **two** defects:
1. The `strategy:` block was indented 2 spaces — floating outside the
`analyze` job — with a misaligned matrix leg, so the file **did not
parse as YAML** (actionlint: *did not find expected '-' indicator*).
CodeQL never ran.
2. The only matrix language was `rust` (beta CodeQL — cancels/hangs).

## Fix

Re-indent the `strategy` block under the job; set the leg to `actions`
(non-empty matrix, no zero-jobs `startup_failure`).

## Verification

`actionlint`: no parse/syntax errors; `actions` leg present, no active
`rust` leg.

## Context

Estate-wide shared-fate: 13 repos carried the beta-Rust CodeQL leg.
Reference: hyperpolymath/gitbot-fleet#375.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -27,12 +27,12 @@ jobs:
     permissions:
       contents: read
       security-events: write
-  strategy:
-    fail-fast: false
-    matrix:
-      include:
-         - language: rust
-          build-mode: default
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - language: actions
+            build-mode: none
 
     steps:
       - name: Checkout