build(deps): bump github/codeql-action/analyze from 4.37.8 to 4.37.9

apple/servicetalk#3633 mergedci-only

What it touches

ci: 1

Modules: .github (1)

Architectural impact (arcade-agent diff_impact)

No production Java file of this PR maps into the dependency graph (tests, build, CI or docs only). Tests are excluded from the graph by design.

Build & CI relevance

• Touches CI workflows: review runner matrix, timeouts, caching.

Files