Resolves: Add native GitHub continuous code security and quality analysis

[szlatkow]

• add codeql-analysis.yml which automatically enables CodeQL code security and quality scanner. It executes on every push commit, PR, manually and every day at 8:00AM UTC. A scan check can be viewed on commits and PRs. All alerts and fix suggestion can be viewed at Security tab -> Code scanning alerts -> CodeQL

Resolves #169

[dnfadmin]

Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.

:x: szlatkow sign now
_{You have signed the CLA already but the status is still pending? Let us recheck it.}