Fix codeql-path-test workflow: ensure gh-codeql extension installation succeeds

[Copilot]

The codeql-path-tests job was failing because gh extension install github/gh-codeql || true silently masked installation failures, then gh codeql set-version failed when attempting to use the non-existent extension.

Changes

• Remove silent failure handling: Removed || true from extension installation to surface failures
• Check existing installation: Skip installation if extension already present (supports cached runners)
• Verify before use: Added gh codeql version check to fail fast with clear error if extension is non-functional

# Before
gh extension install github/gh-codeql 2>/dev/null || true
gh codeql set-version "$CODEQL_VERSION"

# After
if ! gh extension list | grep -q "github/gh-codeql"; then
  echo "Installing gh-codeql extension..."
  gh extension install github/gh-codeql
fi

if ! gh codeql version &>/dev/null; then
  echo "::error::gh codeql extension is not working properly"
  exit 1
fi

gh codeql set-version "$CODEQL_VERSION"

Original prompt

Reference: https://github.com/advanced-security/codeql-development-mcp-server/actions/runs/21834176403/job/63000363397#step:7:1

Fix the "codeql-path-test" job by ensuring that the "gh codeql" is extension is installed before attempting to use it

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.