Fix publish-nuget workflow: resolve signing key path to absolute (#725)

* Add .NET 10 SDK to CodeQL analysis workflow

Add 10.0.x to dotnet-version in codeql-analysis.yml to support
building projects targeting net10.0.

* Fix signing key path resolution in build-signed.ps1

The script passed a relative path (src/RulesEngine/signKey.snk) to
-p:AssemblyOriginatorKeyFile, but MSBuild resolves that relative to the
project directory, causing it to look for the file at
src/RulesEngine/src/RulesEngine/signKey.snk which doesn't exist.

Convert to absolute path using [System.IO.Path]::GetFullPath() so
MSBuild finds the file at its actual location.

Author: YogeshPraj

deployment/build-signed.ps1

@@ -7,7 +7,7 @@ param(
 
 # sign and build the project
 $directory = Split-Path $csprojFilePath;
-$signKeyFile = Join-Path $directory "signKey.snk";
+$signKeyFile = [System.IO.Path]::GetFullPath((Join-Path $directory "signKey.snk"))
 
 $bytes = [Convert]::FromBase64String($signingKey)
 [IO.File]::WriteAllBytes($signKeyFile, $bytes)