fix(ci): pass submodules: recursive to parallel security-scan caller

The `security.yml` workflow calls `security-scan.yml` directly (separate
from the `gates` path), so it needs its own `submodules: recursive` to
give CodeQL's autobuild the SDK submodule.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: WomB0ComB0

.github/workflows/security.yml

@@ -24,4 +24,5 @@ jobs:
     uses: resq-software/.github/.github/workflows/security-scan.yml@main
     with:
       languages: '["csharp","actions"]'
+      submodules: recursive
     secrets: inherit