fix(ci): repoint codeql-action at a SHA that exists (#95)

fix(ci): repoint codeql-action at a SHA that exists (#95) #189