ci(dependabot): group CodeQL updates

[jpnurmi]

Group CodeQL action entries so Dependabot updates both in one PR:

• build(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.4 #1951
• build(deps): bump github/codeql-action/init from 4.37.3 to 4.37.4 #1952

The two need to advance together instead of being submitted separately:

Error: analyze post-action step failed: Loaded a configuration file for version '4.37.4', but running version '4.37.3'

See also:

• https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.98%. Comparing base (b3baa5b) to head (980b2f9).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1957      +/-   ##
==========================================
+ Coverage   69.92%   75.98%   +6.05%     
==========================================
  Files          94       94              
  Lines       22160    22161       +1     
  Branches     3936     3936              
==========================================
+ Hits        15495    16838    +1343     
+ Misses       4694     4438     -256     
+ Partials     1971      885    -1086     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.