Retrieve CodeQL checks after the workflow is done

[rajbos]

Steps to retrieve the CodeQL findings from:

• Find the executed CodeQL workflow after injecting it and wait for it to complete. If it fails, inject a comment in the request issue
• List the languages the scan was successful for (at least one should run successfully)
• Find the number of security findings (from the repo I think), see example here
• Show the information as a badge in a new comment of the request issue

[rajbos]

For inspiration, we can check some steps here.

[rajbos]

Todo:

• Check the individual jobs for the results, before failing this javascript check
• Remove the dispatch on push from the template
• Trigger the workflow by filename, instead of by id, since we will not be able to get the id with the previous action