Set up CodeQL

[jasongin]

The default CodeQL workflow failed because Nerdbank.GitVersioning does not work with a shallow clone. This change adds a codeql.yml file to customize the build workflow. The main changes are to disable versioning and just build the .NET 8 target.

An update to the Nerdbank.GitVersioning package is required for support of the NBGV_GitEngine variable.

After each CodeQL run (weekly and on every PR), we should be able to see results on the (private) Security / Code scanning page of the repo.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[jasongin]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview.

The CodeQL workflow in the PR completed successfully. I can see there were some issues reported; I'll review those later.