Merge releases/v4 into releases/v3

[github-actions]

Merging 16140ae into releases/v3.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

• Mergeback v4.30.8 refs/heads/releases/v4 into main #3199 (@mbg)
• Add setup-codeql action #3204 (@mbg)
• Update default bundle to 2.23.3 #3205 (@henrymercer)
• Skip failed SARIF upload if Code Quality is the only analysis kind #3209 (@mbg)
• Make analysis kinds available for starting status report #3211 (@mbg)
• Install Python 3.13 to fix failing PR checks with older CLI versions #3212 (@mbg)
• Merge main into releases/v4 #3213 (@henrymercer)

Please do the following:

• Ensure the CHANGELOG displays the correct version and date.
• Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
• Check that there are not any unexpected commits being merged into the releases/v3 branch.
• Ensure the docs team is aware of any documentation changes that need to be released.
• Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
• Wait for the "Rebuild" workflow to push a commit updating the distribution files.
• Mark the PR as ready for review to trigger the full set of PR checks.
• Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

[github-actions]

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

[Copilot]

Pull Request Overview

This is a release PR that merges changes from releases/v4 into releases/v3, containing updates and enhancements across multiple areas. The PR updates the default CodeQL bundle version to 2.23.3 and introduces an experimental setup-codeql action.

Key changes:

• Update default CodeQL bundle version from 2.23.2 to 2.23.3
• Add experimental setup-codeql action that installs CodeQL CLI without initializing databases
• Refactor analysis kinds handling to improve code organization and add validation for setup-codeql usage

Reviewed Changes

Copilot reviewed 49 out of 51 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/defaults.json	Updates CodeQL bundle and CLI versions to 2.23.3
src/setup-codeql-action.ts	New experimental action for installing CodeQL CLI only
setup-codeql/action.yml	Action definition for the new setup-codeql action
src/analyses.ts	Refactors analysis kinds parsing with caching and setup-codeql validation
src/init-action.ts	Updates to use refactored analysis kinds handling and prevent concurrent setup-codeql usage
src/environment.ts	Adds environment variable for tracking setup-codeql execution
src/status-report.ts	Adds SetupCodeQL action name and tools download fields interface
src/config-utils.ts	Removes analysis kinds input parameters from config initialization
src/init-action-post-helper.ts	Adds code scanning enablement check for failed SARIF uploads
pr-checks/sync.py	Adds Python installation support to PR check workflows
pr-checks/checks/*.yml	Updates various check configurations to install Python
package.json	Version bump to 3.30.9
lib/*.js	Generated JavaScript files reflecting all source changes
CHANGELOG.md	Documents the new version changes
README.md	Adds documentation for the new setup-codeql action