Merge main into releases/v4

[github-actions]

Merging 70205d3 into releases/v4.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Mergeback v4.30.8 refs/heads/releases/v4 into main #3199 (@mbg)
• Add setup-codeql action #3204 (@mbg)
• Update default bundle to 2.23.3 #3205 (@henrymercer)
• Skip failed SARIF upload if Code Quality is the only analysis kind #3209 (@mbg)
• Make analysis kinds available for starting status report #3211 (@mbg)
• Install Python 3.13 to fix failing PR checks with older CLI versions #3212 (@mbg)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v4 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
• Merge the mergeback PR that will automatically be created once this PR is merged.
• Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

[Copilot]

Pull Request Overview

This is a release-PR merging main into the releases/v4 branch, consolidating several pull requests for version 4.30.9. The main changes include a CodeQL bundle version update and the introduction of an experimental setup-codeql action.

• Update default CodeQL bundle version from 2.23.2 to 2.23.3
• Add experimental setup-codeql action that installs CodeQL CLI without initializing databases
• Refactor analysis kinds handling to improve code organization and prevent conflicts between actions

Reviewed Changes

Copilot reviewed 49 out of 51 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
CHANGELOG.md	Documents the 4.30.9 release with CodeQL bundle update and new experimental setup-codeql action
package.json	Version bump from 4.30.8 to 4.30.9
src/defaults.json	Updates CodeQL bundle and CLI versions to 2.23.3
setup-codeql/action.yml	Defines the new experimental setup-codeql action with inputs and outputs
src/setup-codeql-action.ts	Implements the main logic for the setup-codeql action
src/analyses.ts	Adds getAnalysisKinds function to centralize analysis kinds parsing with caching
src/init-action.ts	Refactors to use centralized analysis kinds handling and adds conflict detection
pr-checks/sync.py	Adds Python installation support to workflow generation
Multiple lib/*.js files	Generated JavaScript code reflecting the TypeScript changes
Multiple workflow files	Generated workflows with Python installation steps