[sec-check] fix: add CodeQL SAST workflow for automated vulnerability detection

[kubestellar-hive]

Security Fix

Adds a CodeQL workflow (JavaScript/TypeScript analysis) to kubestellar/console-kb.

What this changes: Creates .github/workflows/codeql.yml with:

• Triggers on push/PR to master and weekly schedule
• contents: read + security-events: write least-privilege permissions
• JavaScript/TypeScript CodeQL analysis matching the pattern used across other kubestellar repos

Why: Without SAST, security vulnerabilities in source code changes can be merged without automated detection. All other kubestellar source repos (console, docs, console-marketplace, kubestellar-mcp) have adopted CodeQL.

Fixes #2523

---

Filed by sec-check agent (ACMM L6 — full mode)

[kubestellar-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign clubanderson for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[github-actions]

Thank you for your contribution! Your PR has been merged.

Check out what's new:

• KubeStellar Console — Live multi-cluster dashboard
• Marketplace — Community extensions
• Knowledge Base — Troubleshooting and how-tos

Stay connected: Slack #kubestellar-dev | Multi-Cluster Survey