fix: override TargetFrameworks to prevent iOS workload errors in CodeQL build

Using -f net9.0-android doesn't prevent MSBuild from evaluating and
importing workloads for ALL declared TargetFrameworks (including ios and
maccatalyst) during project SDK evaluation. This happens before the
framework selector takes effect.

Using /p:TargetFrameworks=net9.0-android overrides the property at the
command-line level (highest MSBuild priority), so the SDK only sees
net9.0-android during evaluation and doesn't try to import unavailable
iOS/macCatalyst workloads.

Also build only the library project instead of the full solution, since
DemoApp code isn't needed for CodeQL security analysis.

Agent-Logs-Url: https://github.com/trimble-oss/modus-mobile-maui-components/sessions/bcc76a04-3fd6-4b59-beb1-97abd429b4af

Co-authored-by: jeff-at-trimble <215895768+jeff-at-trimble@users.noreply.github.com>

Author: Copilot

.github/workflows/codeql-analysis.yml

@@ -53,7 +53,7 @@ jobs:
         queries: +security-and-quality
 
     - name: Build
-      run: dotnet build Trimble.Modus.Components.sln -f net9.0-android -c Release
+      run: dotnet build Trimble.Modus.Components/Trimble.Modus.Components.csproj /p:TargetFrameworks=net9.0-android -c Release
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v4