[camesenin]

Description

Adds a dedicated GitHub Actions CodeQL analysis workflow for the TypeScript codebases in \client/\ and \rontend/.

Tasks completed

• Added .github/workflows/codeql.yml\ targeting \javascript-typescript.
• Configured triggers on push to \main, pull requests against \main, and a weekly scheduled cron (Monday at 06:00 UTC).
• Configured \security-extended\ and \security-and-quality\ queries with \security-events: write\ permissions.
• Added entry to \PROGRESS.md.

Closes #153