Add suppression. (#3591)

Author: pmaytak

src/Microsoft.Identity.Web.Certificate/KeyVaultCertificateLoader.cs

@@ -79,6 +79,7 @@ public async Task LoadIfNeededAsync(CredentialDescription credentialDescription,
                 };
             }
 
+            // CodeQL [SM05137] intentional: Using default credential because user may configure any of the supported auth methods. This method is also not used always as the resulting retrieved keys are cached.
             DefaultAzureCredential credential = new(options);
             CertificateClient certificateClient = new(keyVaultUri, credential);
             SecretClient secretClient = new(keyVaultUri, credential);