ci: add push-only CodeQL scan with High/Critical alert relay - #13

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.