[release/2.1] Add CodeQL3000 run to aspnetcore-ci-official (#44720)

* [release/2.1] Add CodeQL3000 run to aspnetcore-ci-official
- backport of #44688, via #44717 and #44719
  - update a bit less because we're not using Arcade here
- add new schedule for a weekly run
- add top-level parameter enabling CodeQL3000 in manual builds
- add a separate job w/ CodeQL3000 tasks included in build steps; run this job alone
  - set `$(UseSharedCompilation)` to `false` to ease analysis
  - extend timeout of CodeQL3000 job
- add tag indicating CodeQL3000 tasks did useful work
  - ignore no-op task executions
- add a tsaoptions.json file
  - cribbed values from our eng/sdl-tsa-vars.config file (in other branches)

* Remove flaky-on-Windows test
- `ClientAttemptingToUseUnsupportedProtocolIsLoggedAsDebug()` adds no value

Author: dougbu