Update CodeQL Action to v4

[Copilot]

CodeQL Action v3 will be deprecated in December 2026. Updated the Trivy SARIF upload action to use v4.

Changes

• .github/workflows/ci.yml: Updated github/codeql-action/upload-sarif from @v3 to @v4 (line 133)

- name: Upload Trivy results to GitHub Security
  uses: github/codeql-action/upload-sarif@v4  # was @v3
  if: always()
  with:
    sarif_file: 'trivy-results.sarif'

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}