fix(ci): actually repoint codeql-action at a SHA that exists

github/codeql-action@29b1f65 exists in no repository -- the
GitHub API returns 422 -- so CodeQL could not build its run graph and
reported startup_failure in 0 seconds. This repository has had no CodeQL
scanning at all.

Repointed at 4187e74d05793876e9989daffde9c3e66b4acd07, what the v3 tag resolves to
(v3.37.3), verified against the API.

Supersedes an earlier attempt that branched from the local checkout's HEAD
rather than origin/main. Where the two had drifted, that commit carried an
unrelated diff and left the workflow untouched, so the fix appeared to land
while main still pinned the dead SHA.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -72,7 +72,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@29b1f65c1f735799893313399435a59f54045865 # v3
+      uses: github/codeql-action/init@4187e74d05793876e9989daffde9c3e66b4acd07 # v3
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -101,6 +101,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@29b1f65c1f735799893313399435a59f54045865 # v3
+      uses: github/codeql-action/analyze@4187e74d05793876e9989daffde9c3e66b4acd07 # v3
       with:
         category: "/language:${{matrix.language}}"