fix(ci): use specific runner labels, fix codeql concurrency

Author: somethingwithproof

.github/workflows/codeql.yml

@@ -16,7 +16,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: codeql-${{ github.ref }}-${{ matrix.language }}
+  group: codeql-${{ github.ref }}
   cancel-in-progress: true
 
 jobs: