fix(ci): sync codeql.yml with canonical boj-server pins

RGTV's copy had drifted action SHAs (some invalid). boj-server runs the
same workflow successfully, so restoring its version.

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -1,37 +1,43 @@
-# SPDX-License-Identifier: MPL-2.0-or-later
-name: CodeQL
+# SPDX-License-Identifier: MPL-2.0
+name: CodeQL Security Analysis
+
 on:
   push:
     branches: [main]
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: '0 6 * * 1'
+
 permissions:
   contents: read
+
 jobs:
   analyze:
-    name: Analyze
     runs-on: ubuntu-latest
     permissions:
-      actions: read
       contents: read
       security-events: write
     strategy:
       fail-fast: false
       matrix:
-        language: [actions]
+        include:
+          - language: javascript-typescript
+            build-mode: none
+          - language: actions
+            build-mode: none
+
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3
+        uses: github/codeql-action/init@5e316336eb4f107009e477d4bfbfff13d7250fae # v4
         with:
           languages: ${{ matrix.language }}
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3
+          build-mode: ${{ matrix.build-mode }}
+
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3
+        uses: github/codeql-action/analyze@5e316336eb4f107009e477d4bfbfff13d7250fae # v4
         with:
           category: "/language:${{ matrix.language }}"
-