Add CodeQL Analysis workflow for enhanced code security scanning

[Copilot]

This PR adds a comprehensive CodeQL Analysis workflow to enhance the repository's security posture by automatically identifying potential vulnerabilities and code quality issues.

What's Added

• New GitHub Actions workflow: .github/workflows/codeql.yml
• Multi-language support: Configured to analyze both Python and TypeScript/JavaScript codebases
• Comprehensive triggers: Runs on pull requests, pushes to main branch, and weekly scheduled scans

Key Features

The CodeQL workflow includes:

• Automated security scanning using GitHub's industry-standard CodeQL engine
• Multi-language analysis covering the repository's primary languages:
  • Python (for the /python/ directory containing coinbase-agentkit and framework extensions)
  • TypeScript/JavaScript (for the /typescript/ directory containing AgentKit.js)
• Flexible scheduling:
  • Triggered on all pull requests to catch issues before merge
  • Runs on pushes to the main branch for continuous monitoring
  • Weekly scheduled scans every Monday at 1:30 AM UTC for regular security audits
• Proper permissions configured for security events reporting and SARIF upload

Implementation Details

The workflow uses GitHub's standard CodeQL template with customizations for this repository:

• Uses build-mode: none for both languages (appropriate for interpreted languages)
• Includes comprehensive permissions for security-events writing
• Configures a 6-hour timeout to accommodate thorough analysis
• Follows the repository's existing workflow patterns and conventions

This enhancement will help maintain code security standards and provide early detection of potential vulnerabilities without requiring any changes to existing code or development workflows.

This pull request was created as a result of the following prompt from Copilot chat.

Add a CodeQL Analysis workflow to this repository to enhance code security and identify vulnerabilities. Use the standard CodeQL workflow template provided by GitHub and target the primary programming languages used in this repository. Ensure the workflow runs on pull requests and pushes to the default branch.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.