Add CodeQL security analysis workflow

[markobud]

Create .github/workflows/codeql.yml for Python security scanning, scheduled weekly. Set up vulnerability reporting and automations.