ci: fix CodeQL build failures by using correct Python version

The CodeQL workflow was failing for Swift and C++ analyses because:
1. The workflow sets up Python 3.12 via actions/setup-python
2. But xcodebuild doesn't inherit this Python in its environment
3. The Makefile uses hardcoded python3 which resolves to Xcode's
   bundled Python 3.9
4. This causes build failures when the Makefile is executed during
   the Data target build phase

Changes:
- Add Python 3.12 setup step to CodeQL workflow
- Pass PYTHON environment variable to xcodebuild command
- Update Makefile to use $(PYTHON) variable instead of hardcoded
  python3
- Allows environment to override Python executable while maintaining
  backward compatibility

This ensures CodeQL builds use the correct Python version and fixes
the cascading Swift/C++ build failures.

Fixes: https://github.com/openvanilla/McBopomofo/actions/runs/18998321918

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: tianjianjiang

.github/workflows/codeql.yml

@@ -48,6 +48,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@v4
 
+    - name: Set up Python
+      uses: actions/setup-python@v6
+      with:
+        python-version: '3.12'
+
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4
       with:
@@ -56,7 +61,7 @@ jobs:
 
     - name: Build project
       run: |
-        xcodebuild -scheme McBopomofoInstaller -configuration Debug build ARCHS=arm64 ONLY_ACTIVE_ARCH=YES
+        PYTHON=$(which python3) xcodebuild -scheme McBopomofoInstaller -configuration Debug build ARCHS=arm64 ONLY_ACTIVE_ARCH=YES
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v4

Source/Data/Makefile

@@ -1,16 +1,18 @@
+PYTHON ?= python3
+
 .PHONY: sort clean
 
 all: data.txt data-plain-bpmf.txt associated-phrases-v2.txt
 
 install: all
 
 data-plain-bpmf.txt: curation/compilers/plain_bpmf_compiler.py BPMFBase.txt BPMFPunctuations.txt
-	python3 -m curation.compilers.plain_bpmf_compiler BPMFBase.txt BPMFPunctuations.txt data-plain-bpmf.txt
+	$(PYTHON) -m curation.compilers.plain_bpmf_compiler BPMFBase.txt BPMFPunctuations.txt data-plain-bpmf.txt
 
 data.txt: curation/compilers/main_compiler.py BPMFBase.txt BPMFMappings.txt BPMFPunctuations.txt \
           PhraseFreq.txt phrase.occ Symbols.txt Macros.txt\
           heterophony1.list heterophony2.list heterophony3.list
-	python3 -m curation.compilers.main_compiler \
+	$(PYTHON) -m curation.compilers.main_compiler \
 		--heterophony1 heterophony1.list \
 		--heterophony2 heterophony2.list \
 		--heterophony3 heterophony3.list \
@@ -23,10 +25,10 @@ data.txt: curation/compilers/main_compiler.py BPMFBase.txt BPMFMappings.txt BPMF
 		--output data.txt
 
 associated-phrases-v2.txt: data.txt curation/builders/phrase_deriver.py associated-punctuation.txt
-		python3 -m curation.builders.phrase_deriver $< $@ associated-punctuation.txt
+		$(PYTHON) -m curation.builders.phrase_deriver $< $@ associated-punctuation.txt
 
 PhraseFreq.txt: curation/builders/frequency_builder.py phrase.occ exclusion.txt
-	python3 -m curation.builders.frequency_builder
+	$(PYTHON) -m curation.builders.frequency_builder
 
 clean:
 	rm -f data.txt data-plain-bpmf.txt phrase.list
@@ -68,7 +70,7 @@ tidy:
 	@sed -i '' -e 's/1/˙/g;s/2/ˊ/g;s/3/ˇ/g;s/4/ˋ/g' BPMFMappings.txt
 
 _phrase.occ: phrase.list
-	@python3 scripts/count_occurrences.py phrase.list > tmp && mv tmp phrase.occ
+	@$(PYTHON) scripts/count_occurrences.py phrase.list > tmp && mv tmp phrase.occ
 
 phrase.list: BPMFBase.txt BPMFMappings.txt
 	awk 'length($$1)<4{print $$1}' BPMFBase.txt > tmp