sdk%ci: add semgrep rules for attributes, update nightly matrix to test std and minimal cases, isolate blst FFI use, consolidate bls_{ietf,chia} features, run default CodeQL query set - #19