chore: remove weekly schedule triggers from cross-platform and codeql

Both workflows ran on a weekly Monday cron and emailed a failure notification
on any red run -- including transient/environment-specific failures (e.g. the
Windows cross-platform job) that carry no actionable signal for a solo
maintainer. Drop the schedule triggers.

Coverage is preserved without the cron:
- cross-platform still runs on push to main touching package code, and on
  manual dispatch.
- codeql still scans every push to main and every pull request, so all changed
  code is still security-scanned.

https://claude.ai/code/session_01WJdXSEnHXZ8bhuV33vBN1R

Author: 0xmariowu

.github/workflows/codeql.yml

@@ -5,8 +5,9 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
-  schedule:
-    - cron: '0 6 * * 1'  # Weekly Monday 6am UTC
+  # Weekly schedule removed to stop scheduled failure-notification emails.
+  # CodeQL still scans every push to main and every PR, so security coverage
+  # of all changed code is preserved.
 
 concurrency:
   group: codeql-${{ github.ref }}

.github/workflows/cross-platform.yml

@@ -4,8 +4,10 @@ name: Cross-Platform Tests
 # E2B sandboxes are Linux-only; this workflow provides real Windows/macOS coverage.
 
 on:
-  schedule:
-    - cron: "0 3 * * 1"   # UTC 03:00 every Monday
+  # Weekly schedule removed: these jobs hit external endpoints and Windows
+  # runners that produce false-alarm failure emails with no actionable signal.
+  # Coverage is preserved via the push trigger below (runs on every main change
+  # that touches package code) plus manual dispatch from the Actions tab.
   workflow_dispatch:       # manual trigger
   push:
     branches: [main]