feat: codeql pack with trusted owners

[erikburt]

Adds a codeql pack configuration that we can use to ensure actions published by our own org do not trigger codeql errors.

Notes

I have not created an automatic way to version+publish this codeql pack, as this should almost never be updated.

Testing

1. I published the below pack as smartcontractkit/actions-all-extension-poc@0.0.2 (https://github.com/orgs/smartcontractkit/packages/container/package/actions-all-extension-poc)
2. Tested it releng-test repository
   • Used CodeQL advanced and a custom codeql config to scan a workflow should only have 1 error: https://github.com/smartcontractkit/releng-test/blob/main/.github/workflows/unpinned-actions.yml
   • We can see that there's only 1 error related to unpinned tag in the Code scanning tab: https://github.com/smartcontractkit/releng-test/security/code-scanning

---

DX-2637