Update version tag comments for codeql-action to v4.31.6

[Copilot]

Description

Dependabot bumped github/codeql-action from 4.31.2 to 4.31.6 (hash fe4161a26a8629af62121b670040955b330f9af2), but version tag comments remained at v3.29.5.

Updated version comments in:

• .github/workflows/reusable_codeql.yml - codeql-action/init and codeql-action/analyze
• .github/workflows/reusable_trivy.yml - codeql-action/upload-sarif
• .github/workflows/scorecard.yml - codeql-action/upload-sarif

Based on #1547 but targeting main branch.

Ref: #1545

Checklist

• Code compiles without errors locally
• All tests pass locally
• CI workflows execute properly

Original prompt

Dependabot bumped github/codeql-action from 4.31.2 to 4.31.6 (hash fe4161a26a8629af62121b670040955b330f9af2), but version tag comments remained at v3.29.5. This PR updates the comments to reflect the actual version.

Update the version tag comments in the following workflow files so they match the bumped version:

• .github/workflows/reusable_codeql.yml - update version comments for codeql-action/init and codeql-action/analyze to v4.31.6
• .github/workflows/reusable_trivy.yml - update version comment for codeql-action/upload-sarif to v4.31.6
• .github/workflows/scorecard.yml - update version comment for codeql-action/upload-sarif to v4.31.6

This PR is based on #1547 (see: #1547) but targets the main branch instead of the dependabot branch.

Checklist:

• Code compiles without errors locally
• All tests pass locally
• CI workflows execute properly

Ref: #1545

This pull request was created as a result of the following prompt from Copilot chat.

Dependabot bumped github/codeql-action from 4.31.2 to 4.31.6 (hash fe4161a26a8629af62121b670040955b330f9af2), but version tag comments remained at v3.29.5. This PR updates the comments to reflect the actual version.

Update the version tag comments in the following workflow files so they match the bumped version:

• .github/workflows/reusable_codeql.yml - update version comments for codeql-action/init and codeql-action/analyze to v4.31.6
• .github/workflows/reusable_trivy.yml - update version comment for codeql-action/upload-sarif to v4.31.6
• .github/workflows/scorecard.yml - update version comment for codeql-action/upload-sarif to v4.31.6

This PR is based on #1547 (see: #1547) but targets the main branch instead of the dependabot branch.

Checklist:

• Code compiles without errors locally
• All tests pass locally
• CI workflows execute properly

Ref: #1545

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.