✨ Use local files instead of search for SAST CodeQL check

[spencerschrock]

What kind of change does this PR introduce?

feature

• PR title follows the guidelines defined in our pull request documentation

What is the current behavior?

The SAST check uses the GitHub Search endpoint to look for workflow files that call CodeQL via github/codeql-action/analyze

What is the new behavior (if this is a feature change)?**

Looks for steps which call github/codeql-action/analyze in the local files. This saves us a Search API call

• Tests for the changes have been added (for bug fixes/features)

Which issue(s) this PR fixes

NONE

Special notes for your reviewer

This is a precursor for re-enabling the SAST check in the weekly cron.

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to
the release-note

(In particular, describe what changes users might need to make in their
application as a result of this pull request.)

The SAST check will look for workflows with the "github/codeql-action/analyze" action locally instead of the GitHub Search API endpoint.

[codecov]

Codecov Report

Merging #2839 (3fc6d1b) into main (4809b20) will increase coverage by 0.05%.
The diff coverage is 83.78%.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2839      +/-   ##
==========================================
+ Coverage   49.76%   49.81%   +0.05%     
==========================================
  Files         158      158              
  Lines       11965    11992      +27     
==========================================
+ Hits         5954     5974      +20     
- Misses       5644     5648       +4     
- Partials      367      370       +3