ci(deps): group codeql-action sub-action updates in dependabot

[madhavilosetty-intel]

github/codeql-action/{init,analyze,autobuild,upload-sarif} are released in lockstep from one repo but land as separate dependabot PRs. Group them so each bump opens a single PR.

PR Checklist

• Unit Tests have been added for new changes
• API tests have been updated if applicable
• All commented code has been removed
• If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

[Copilot]

Pull request overview

Groups Dependabot updates for the github-actions ecosystem so that github/codeql-action sub-actions (init/analyze/autobuild/upload-sarif) are updated together in a single PR, reflecting their lockstep release process.

Changes:

• Added a Dependabot groups rule to combine all github/codeql-action* updates into one grouped PR for GitHub Actions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[graikhel-intel]

LGTM. We first tested this change in RPS by merging device-management-toolkit/rps#2814

After that PR was merged, Dependabot correctly grouped the remaining CodeQL Action updates into a single follow-up PR: https://github.com/device-management-toolkit/rps/pull/2816/changes

[RosieAMT]

🎉 This PR is included in version 3.3.18 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀