Consolidate remaining dependency updates

[masarray]

Summary

• update both github/codeql-action/init and github/codeql-action/analyze from 4.36.3 to 4.37.0 using the same pinned commit so CodeQL initialization and analysis remain version-aligned
• update Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.0
• preserve the already-merged coverlet.msbuild 10.0.1 update
• refresh the committed NuGet lock file, including removal of the no-longer-required Newtonsoft.Json test-platform dependency

Supersedes

• Bump github/codeql-action/analyze from 4.36.3 to 4.37.0 #28
• Bump github/codeql-action/init from 4.36.3 to 4.37.0 #30
• Bump Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.0 #32

The two separate CodeQL Dependabot PRs fail when tested independently because init and analyze are pinned to different action revisions. This PR applies them atomically and validates them together against the current GPL/commercial-licensing main branch.

Validation expected

• current-license, provenance, and public-wording checks
• locked restore
• Publisher and Subscriber Release builds
• deterministic tests and coverage gates
• CodeQL analysis
• dependency vulnerability reports
• Windows publish, installer, SBOM, checksum, and release-artifact validation

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.