chore(ci): bump github/codeql-action from 4.37.4 to 4.37.6

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.4...v4.37.6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/codeql.yml

@@ -23,10 +23,10 @@ jobs:
       security-events: write # upload SARIF results to code scanning
     steps:
       - uses: actions/checkout@v7
-      - uses: github/codeql-action/init@v4.37.4
+      - uses: github/codeql-action/init@v4.37.6
         with:
           languages: javascript-typescript
           build-mode: none # interpreted — nothing to compile
-      - uses: github/codeql-action/analyze@v4.37.4
+      - uses: github/codeql-action/analyze@v4.37.6
         with:
           category: "/language:javascript-typescript"

.github/workflows/scorecard.yml

@@ -32,6 +32,6 @@ jobs:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
-      - uses: github/codeql-action/upload-sarif@v4.37.4
+      - uses: github/codeql-action/upload-sarif@v4.37.6
         with:
           sarif_file: results.sarif