INF-06: New sast.yml workflow runs CodeQL analysis on push to main and PRs for Go and JavaScript/TypeScript.