Set up code security scanning

**Is your feature request related to a problem? Please describe.**
Leverage the CodeQL GitHub feature (see Security tab).

**Describe the solution you'd like**
Commit the correct yaml config and verify that the scanning works.
