Combine CodeQL and build workflows, add contents:write permission (#12)

## Summary
- Merge CodeQL analysis steps back into the main dotnet.yml workflow
- Remove separate codeql.yml file that was causing the split
- Add job-level permissions including contents:write required for
release uploads
- Fix NUGET_KEY reference to NUGET_API_KEY
- Fix matrix.language reference to hardcoded csharp value

## Changes
- Combined both workflows into single dotnet.yml file (restoring
functionality from commit 92a6d03)
- Added proper permissions: actions: read, contents: write,
security-events: write
- Removed redundant separate codeql.yml workflow
- Updated secret key name for NuGet publishing

## Test plan
- [ ] Verify workflow runs successfully on push
- [ ] Confirm CodeQL analysis executes and uploads SARIF results
- [ ] Test release artifact uploads work with contents:write permission
- [ ] Validate NuGet package publishing on tags

## High-level PR Summary
This PR consolidates the CodeQL security analysis workflow into the main
dotnet build workflow by removing the separate `codeql.yml` file and
merging its steps into `dotnet.yml`. It also adds necessary permissions
(`actions:read`, `contents:write`, `security-events:write`) at the job
level to support release uploads and security scanning, and fixes the
NuGet API key secret reference from `NUGET_KEY` to `NUGET_API_KEY`. The
language reference was also hardcoded from a matrix variable to `csharp`
since only a single language is being analyzed.

Author: jas88

.github/workflows/dotnet.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       actions: read
-      contents: read
+      contents: write
       security-events: write
     steps:
     - uses: actions/checkout@v5
@@ -66,5 +66,4 @@ jobs:
       if: contains(github.ref,'refs/tags/')
       run: |
         cd dist
-        dotnet nuget push *[0-9].nupkg -s https://api.nuget.org/v3/index.json -k ${{ secrets.NUGET_KEY }} --skip-duplicate
-      
+        dotnet nuget push *[0-9].nupkg -s https://api.nuget.org/v3/index.json -k ${{ secrets.NUGET_API_KEY }} --skip-duplicate

.gitignore

@@ -326,7 +326,11 @@ ASALocalRun/
 # NVidia Nsight GPU debugger configuration file
 *.nvuser
 
-# MFractors (Xamarin productivity tool) working folder 
+# MFractors (Xamarin productivity tool) working folder
 .mfractor/
 Visual Studio 2017/
-.claude/*
+
+# Claude Code
+.claude/
+*.claude
+.claude-*