Only run CodeQL if the appropriate language changes

[rzuckerm]

I fixed #3995

The way this works is as follows:

• A matrix is dynamically constructed from the Changed Files job by scripts/get_codeql_languages.py
• Before analysis is done, any files that are not changed are removed from the build since CodeQL does not have a way to exclude files
• scripts/build_codeql_language.py build the requested file for the CodeQL analysis

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[jrg94]

💯 nice work!