chore(deps): group codeql-action subaction bumps into one PR

github/codeql-action is a monorepo; init and analyze share one release
SHA and must move together. When dependabot bumped them in separate PRs,
the odd one out failed the CodeQL job:

  Loaded a configuration file for version X, but running version Y

Add a github-actions dependabot group matching github/codeql-action* so
all subactions bump together in a single PR.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: gtrrz-victor

.github/dependabot.yml

@@ -30,3 +30,11 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 5
+    groups:
+      # CodeQL subactions (init, analyze, ...) share one monorepo release and
+      # must move together — a version mismatch fails the CodeQL job with
+      # "Loaded a configuration file for version X, but running version Y".
+      # Grouping bundles every github/codeql-action/* bump into one PR.
+      codeql-action:
+        patterns:
+          - "github/codeql-action/*"