CI/CD - Bump codeql action version to v3

[polarG]

Description

Solution
Bump CodeQL action version to V3

[Copilot]

Pull request overview

This pull request updates the GitHub CodeQL action version from v2 to v3 in the repository's CI/CD workflow, keeping the security scanning infrastructure up to date.

Changes:

• Updated all CodeQL action references from v2 to v3 in the workflow file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.70%. Comparing base (abaf410) to head (324916f).

Additional details and impacted files

@@                      Coverage Diff                      @@
##           hongtaozhang/fix-image-build     #777   +/-   ##
=============================================================
  Coverage                         85.70%   85.70%           
=============================================================
  Files                               102      102           
  Lines                              7703     7703           
=============================================================
  Hits                               6602     6602           
  Misses                             1101     1101           

Flag	Coverage Δ
cpu-python3.10-unit-test	70.96% <ø> (ø)
cpu-python3.12-unit-test	70.96% <ø> (ø)
cpu-python3.7-unit-test	70.43% <ø> (ø)
cuda-unit-test	83.59% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.