fix(ci): CodeQL analyse rust, not javascript-typescript

verisimiser is a Rust crate with zero JS/TS source. The estate
template's default `language: javascript-typescript` + `build-mode:
none` made CodeQL fail with a 'no source / configuration error' on
every run — a pre-existing baseline red on main (failing on the
merge-base bd84283 and the 2026-05-15 run), not introduced by #102.
The canonical rsr-template-repo codeql.yml is identical, so this is a
template-default mismatch for Rust-only consumers, not local drift.

Switch to `language: rust` (CodeQL public beta, supported by the
pinned codeql-action v3.28.1; build-mode: none is the correct buildless
extraction mode for Rust). Makes the check both meaningful and green;
also clears main's pre-existing red on merge.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: tanush5800

.github/workflows/codeql.yml

@@ -22,7 +22,13 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - language: javascript-typescript
+          # verisimiser is a Rust crate with zero JS/TS source. The estate
+          # template's default `javascript-typescript` made CodeQL fail with
+          # a "no source / configuration error" on every run (pre-existing
+          # red on main, not introduced by #102). Analyse the language that
+          # actually exists. `build-mode: none` is the correct (buildless)
+          # extraction mode for Rust in CodeQL.
+          - language: rust
             build-mode: none
 
     steps: