build(deps): bump github/codeql-action from 4.36.2 to 4.36.3

[tiran]

Pull Request Description

What

Update all github/codeql-action sub-actions to v4.36.3:

• codeql-action/init in codeql.yaml
• codeql-action/upload-sarif in scorecard.yaml

Also configure dependabot to group all github/codeql-action/* updates into a single PR to avoid separate PRs for each sub-action.

Why

Closes: #1231
Closes: #1234

• PR follows CONTRIBUTING.md guidelines

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR bumps the pinned commit SHAs for two github/codeql-action steps (init in the CodeQL workflow, upload-sarif in the Scorecard workflow) from v4.36.2 to v4.36.3, and adds a Dependabot groups configuration to bundle future github/codeql-action/* updates into a single PR.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Changes

File	Change
.github/workflows/codeql.yaml	Bumped github/codeql-action/init pinned commit to v4.36.3
.github/workflows/scorecard.yaml	Bumped github/codeql-action/upload-sarif pinned commit to v4.36.3
.github/dependabot.yml	Added codeql group to bundle github/codeql-action/* updates

Related issues: #1231, #1234

Suggested labels: dependencies, github_actions

Suggested reviewers: none identified from the provided context

🐰 A rabbit's rhyme

Two little SHAs hopped up a notch,
v4.36.3, right on the dot,
Dependabot now groups them tight,
one tidy burrow, no more fight.
thump thump — merged and out of sight! 🥕

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The PR updates both linked targets: codeql-action/init and upload-sarif to v4.36.3.
Out of Scope Changes check	✅ Passed	The Dependabot grouping change is directly related to the stated objective and no unrelated changes are present.
Title check	✅ Passed	The title accurately summarizes the main change: bumping github/codeql-action versions.
Description check	✅ Passed	The description clearly matches the changeset and explains the version bumps and Dependabot grouping.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[rd4398]

LGTM