Agree on automated code-scanning tool

[janhalen]

What needs to be done

• @janhalen suggests tooling based on the needs of the @OS2agora/maintainers and @OS2agora/developers teams

[janhalen]

I suggest we for simplicitys sake enable the built in GitHub framework CodeQL on the code repositories.

Its integrates fluently in the GitHub PR flow and supports C#, both delivering a good strategic fit for os2agora.

[janhalen]

Alternatives, that delivers different approaches:

https://github.com/marketplace/actions/devskim

https://github.com/zaproxy/action-baseline, https://github.com/zaproxy/action-full-scan