fix: improve token handling and logging in CodeQL extractor

[GeekMasher]

No description provided.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA d935f6f.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

[Copilot]

Pull Request Overview

This PR fixes token handling and logging in the CodeQL extractor by improving the token retrieval logic and ensuring proper authentication throughout the codeql installation process.

• Improves token handling in the get_token() method with better fallback logic and debug logging
• Fixes GitHub CLI authentication by properly passing tokens to all commands
• Reorganizes directory path checking for better prioritization of working directory

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
src/main.rs	Moves SARIF directory creation earlier and fixes method name from .output() to .sarif()
src/codeql.rs	Improves token handling in CodeQL installation with proper authentication flow
src/action.rs	Enhances token retrieval logic with better fallback handling and directory path ordering

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}