Add codeql perms

[williammartin]

Description

Ensure CodeQL has the necessary permissions.

[Copilot]

Pull request overview

Adds repository governance/security documentation and updates CodeQL workflow permissions, along with a patch version bump.

Changes:

• Bump package version to 7.10.6
• Add SECURITY.md, CODE_OF_CONDUCT.md, and contributing/codeowners metadata under .github/
• Expand CodeQL workflow permissions to enable SARIF upload

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
package.json	Patch version bump for the package release.
SECURITY.md	Adds a security policy and disclosure guidance.
CODE_OF_CONDUCT.md	Adds a Contributor Covenant code of conduct.
.github/workflows/codeql.yml	Grants CodeQL the permissions needed for analysis + SARIF upload.
.github/CONTRIBUTING.md	Adds contribution guidelines for the repo.
.github/CODEOWNERS	Establishes default code ownership for review routing.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.