fix: disable CodeQL pr-diff-range extension pack causing undefined values

- Add explicit queries: +security-and-quality to avoid extension pack auto-selection
- The pr-diff-range extension pack was generating invalid restrictAlertsTo rows
- This forces CodeQL to run standard security and quality queries without PR filtering

Author: joshrotenberg

.github/workflows/codeql.yml

@@ -35,6 +35,8 @@ jobs:
         uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f2  # v3.27.4
         with:
           languages: ${{ matrix.language }}
+          # Disable pr-diff-range extension pack that causes undefined values
+          queries: +security-and-quality
           # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
 
       - name: Install Rust
@@ -54,4 +56,6 @@ jobs:
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f2  # v3.27.4
         with:
-          category: "/language:${{matrix.language}}"
+          category: "/language:${{matrix.language}}"
+          # Disable automatic PR filtering to avoid extension pack issues
+          upload-database: true