Add code review and automated security checks as GitHub Actions

[ghutchis]

For a pull request:

• checkout the GitHub repo and commit
• run automated CodeQL and other code and security checks