[Lint] Wrap-up lint adding

[titaiwangms]

1. Permission of thrid-party Github action checkers

Suggested by Justin:
>We should consider limiting the github token's permission for this job:
>https://docs.github.com/en/actions/security-guides/automatic-token-authentication#example-1-passing-the-github_token-as-an-input
>https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

2. Add .bat version of auto-formatter
3. Silent GitHub Code Scanning / CodeQL for now