* Adding basic codeQL analysis

Adding CodeQL analysis pipeline for common vulnerability scanning.

* adding security-and-quality query pack