chore: add codeql action and config

[maharifu]

Add codeql github action and config based on cosmos-sdk config - https://github.com/cosmos/cosmos-sdk/blob/main/.github/workflows/codeql-analysis.yml

Related Github tickets

• [CI] Add CodeQL to CI VolumeFi/paloma#1476

Background

Add a new github action to run CodeQL on the codebase. It add no functionality, so there are no tests and there should not be any breaking changes.

Testing completed

• test coverage exists or has been added/updated
• tested in a private testnet

Breaking changes

• I have checked my code for breaking changes
• If there are breaking changes, there is a supporting migration.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[byte-bandit]

LGTM, it's already picked up quite a handful: https://github.com/palomachain/paloma/security/code-scanning?query=pr%3A1166+is%3Aopen

@verabehr I think it's worth creating a follow-up ticket to address the issues reported by this, especially around the panics, as these can lead to the infamous AppHash.

[verabehr]

ticket added here VolumeFi#1591