Setup CodeQL

[mbaker3]

Related: #103

Setup CodeQL analysis using GitHub Actions:
https://github.com/decline-cookies/anvil-csharp-core/security/code-scanning
Consider running dotnet clean and dotnet restore steps like GitHub's autobuild does.

• We can't use autobuild because it doesn't pick up on the core level csproj. It only builds the logging project.

See test implementation at
https://github.com/mbaker3/anvil-csharp-core/blob/main/.github/workflows/codeql-analysis.yml

Make sure Logging and core projects are analyzed using both their dot net core and msbuild versions.

Bonus

• Also review Jet Brains Qodana to see if it's more appropriate
  • https://www.jetbrains.com/help/qodana/qodana-dotnet.html

[mbaker3]

Partially completed by #125 but requires additional work outlined in this comment
#125 (review)