chore(ci): route CodeQL through shared netresearch/.github reusable

Replace the inline github/codeql-action init/autobuild/analyze steps with
the org's codeql.yml reusable (languages: javascript-typescript), so the
pinned codeql-action version is maintained centrally instead of bumped
per-repo by Renovate.

Signed-off-by: Sebastian Mendel <sebastian.mendel@netresearch.de>

Author: CybotTM

.github/workflows/codeql.yml

@@ -1,38 +1,24 @@
 name: 'CodeQL'
 
 on:
-    push:
-        branches: ['main']
-    pull_request:
-        branches: ['main']
-    schedule:
-        - cron: '18 21 * * 2'
+  push:
+    branches: ['main']
+  pull_request:
+    branches: ['main']
+  schedule:
+    - cron: '18 21 * * 2'
 
 permissions: {}
 
 jobs:
-    analyze:
-        name: Analyze
-        runs-on: ubuntu-latest
-        timeout-minutes: 360
-        permissions:
-            actions: read
-            contents: read
-            security-events: write
-
-        steps:
-            - name: Checkout repository
-              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-
-            - name: Initialize CodeQL
-              uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
-              with:
-                  languages: javascript
-
-            - name: Autobuild
-              uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
-
-            - name: Perform CodeQL Analysis
-              uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
-              with:
-                  category: '/language:javascript'
+  # CodeQL runs through the org's shared reusable in netresearch/.github,
+  # so the pinned github/codeql-action versions are maintained centrally
+  # instead of bumped per-repo by Renovate.
+  analyze:
+    uses: netresearch/.github/.github/workflows/codeql.yml@main
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    with:
+      languages: javascript-typescript