Ensure qlconfig file is created when config parsing in cli is on

[aeisenberg]

Previously, with the config parsing in the cli feature flag turned on, the CLI was not able to download packs from other registries. This PR adds the codeql-action changes required for this. The CLI changes will be in a separate, internal PR.

This is a fix for a potential bug that has not yet been raised, so no changelog post is necessary.

Merge / deployment checklist

• Confirm this change is backwards compatible with existing workflows.
• Confirm the readme has been updated if necessary.
• Confirm the changelog has been updated if necessary.

[aeisenberg]

I expect that init-with-registries.yml will fail since in this case the config.yml was not being used. It should pass if the CODEQL_PASS_CONFIG_TO_CLI is explicitly set to false. It will also pass after the corresponding CLI work is merged.

[aeisenberg]

Note that even though the PR Check - Packaging: Download using registries jobs are passing, they are not actually testing what they should be. Because we are not using extra private PATs in this repository, we can't test on other registries. I will be creating an internal PR with an integration test.

This PR also depends on a change to the CLI where we allow the --qlconfig-file option to be passed to database init.

[aeisenberg]

This is ready for review, even though it is not complete until the associated change in the codeql cli is available.

[henrymercer]

This looks mostly good. Comments are mainly around maintainability and filling a few gaps in my knowledge.

[aeisenberg]

@henrymercer can you take another look? There is a minor semantic change. If a user explicitly sets a CODEQL_REGISTRIES_AUTH env var, then this will override the generated env var based on inputs.

I think this provides a nice back door so that in case there are issues with the action not generating or passing the qlconfig or CODEQL_REGISTRIES_AUTH, a workflow can do that explicitly.

[aeisenberg]

I'm going to hold off on merging this until the related PR on the CLI side is merged as well. The assumption here is that the feature will be enabled officially for v2.12.3, but we won't be certain until the CLI PR is merged.

[aeisenberg]

v2.12.3 is now available. I am picking this PR up again.

[aeisenberg]

@henrymercer, can you take another look? Nothing has changed since your last approval.

[henrymercer]

Suggested change

	* Versions 2.12.3+ of the CodeQL CLI support the `--qlconfig` flag in calls to `database init`.
	* Versions 2.12.4+ of the CodeQL CLI support the `--qlconfig` flag in calls to `database init`.

[aeisenberg]

Thanks for the review. Addressed your comments and need another approvel.

[henrymercer]