ci: require CodeQL in merge gate (#108)

* ci(security): fix codeql alerts and lockfile drift

* ci: require codeql in merge gate

Author: anand-testcompare

.github/workflows/org-required-checks.yml

@@ -83,7 +83,7 @@ jobs:
               /^chore\/bump-version-/.test(pr.head.ref) &&
               (pr.user?.login === "github-actions[bot]" || pr.user?.login === "app/github-actions");
 
-            const requiredContexts = ["Vercel"];
+            const requiredContexts = ["Analyze (JavaScript/TypeScript)", "Vercel"];
             if (hasCiRelevantChange && !isReleaseVersionBumpPr) {
               requiredContexts.push("checks", "Preview validation (seed + runtime QA)");
             } else if (hasCiRelevantChange) {