cbe25d0
ci: run CodeQL on every PR Since LGTM is no longer enabled for the systemd repo (as it's going to be discontinued by the EOY), let's run CodeQL on every PR instead to replace it.