Tags: DROOdotFOO/dotfiles

fix: resolve CI security job CodeQL integration issues

- Add required permissions for security-events write access
- Make CodeQL upload continue-on-error to prevent workflow failure
- Add Trivy results display step for better debugging
- Ensure security scanning continues even if CodeQL upload fails