Context

We currently have codeql config in each repo, which needs to be maintained and updated separately. Instead we should add a codeql action in https://github.com/mongodb-labs/drivers-github-tools than can store a single configuration and be updated by dependabot centrally.

See https://github.com/Calysto/maintainer_tools#codeql for an example used in another open source project.

Definition of done

The new action is part of a drivers github tools release and is used by all of our repos, pinned to v1. Use the task tacking sheet for coordination.

Pitfalls

None