ci: remove drift codeql.yml, enable GitHub-managed default setup

[don-petry]

Summary

• Removes the drift .github/workflows/codeql.yml workflow file
• GitHub-managed CodeQL default setup is already in state=configured with languages=[actions] and query_suite=default

Context

Per §2 of the org CI standards, CodeQL scanning must use GitHub-managed default setup — not a per-repo workflow file. The compliance audit (codeql-default-setup-not-configured) flags repos that still ship an inline codeql.yml after enabling default setup, because both configurations run simultaneously and double-bill CI minutes.

The GitHub-managed default setup was previously enabled (API confirms state=configured). This PR removes the now-redundant workflow file to clear the drift finding.

Closes

Closes #65

Generated with Claude Code

[don-petry]

@don-petry — this is ready for review. The change removes the drift codeql.yml workflow; GitHub-managed default setup is already confirmed configured via the API.

[coderabbitai]

Warning

Rate limit exceeded

@don-petry has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 9 minutes and 52 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: af073b4f-09f2-4b19-8dc1-c4c6d3257513

📥 Commits

Reviewing files that changed from the base of the PR and between 9b1d0c2 and 178becd.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/issue-65-20260418-1840

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Removes the repository-scoped CodeQL workflow to rely exclusively on GitHub-managed CodeQL default setup (avoiding duplicate scans and CI-minute double billing), aligning the repo with org CI standards and clearing the drift/compliance finding.

Changes:

• Deleted .github/workflows/codeql.yml so CodeQL runs only via GitHub-managed default setup.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Auto-rebase failed — merge conflict — this branch has conflicts with main that must be resolved manually.

Please resolve the conflicts and push:

git fetch origin
git merge origin/main
# resolve conflicts, then:
git add .
git commit
git push

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[don-petry]

Closing — after rebasing onto main, this branch has no remaining commits. The fix was already incorporated into main via a subsequent PR.