No automated security/dependency scanning (CodeQL)

[yakew7]

No CodeQL (or equivalent code-scanning) workflow is configured, despite the repo installing several third-party ML packages and accepting external contributor PRs into faircode/.

Request: enable GitHub's default CodeQL setup (Settings → Code security → Code scanning) or add a scheduled github/codeql-action workflow for the Python codebase.

[yakew7]

Reopening - PR #142 ("Add CODEOWNERS file") linked "Closes #139" in its description, but that PR has nothing to do with CodeQL/security scanning; it looks like a typo for #138 ("No CODEOWNERS file"), which is what the PR actually implemented and which is correctly closed. This request is still open.