feat: Added CodeQL SAST scanning and detect-secrets pre-commit hook

[ntkathole]

What this PR does / why we need it:

This PR adds CodeQL SAST scanning and detect-secrets hook that runs on every commit to catch accidentally committed secrets.

CodeQL SAST scanning that runs on:

• PRs targeting master
• Pushes to master
• Weekly schedule (Mondays 6am UTC)
• Scoped to python and javascript-typescript

.pre-commit-config.yaml (modified) - added detect-secrets hook that runs on every commit to catch accidentally committed secrets. Excludes lock files, requirements, SVGs, and HTML to avoid false positives.

---

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 3 additional findings.