Adjust actions trying to fix recent issues

Summary:
## AI generated
I've analyzed the failed run.
The issue is that GitHub's **"Default Setup"** for CodeQL is automatically running on every push, including pushes to the `gh-pages` branch.

This causes two problems:

1. On `gh-pages`: This branch only contains the built website and a vendored `node_modules/monaco-editor`. CodeQL tries to analyze the JavaScript but fails because there's no Action source code ("Analyze (actions)" error) and tries to build Java/Kotlin but fails because the source and Gradle wrapper are missing ("Analyze (java-kotlin)" error).
2. On `main`: Even on the `main` branch, CodeQL's "autobuild" often fails with Gradle projects that use complex structures or specific Java toolchains (like this one, which requires Java 17).

Adding an explicit `codeql.yml` (switching to **"Advanced Setup"**) fixes this because:

- We can exclude the `gh-pages` branch entirely, preventing useless and failing runs.
- We can provide custom build steps (like `./gradlew :ktfmt:build`) to ensure CodeQL can successfully compile the project for analysis, instead of relying on the unreliable "autobuild".

___

Differential Revision: D106687399

fbshipit-source-id: 4f15286aca4bce85da45775d62433350e53726bb

Author: Nivaldo Bondança

.github/workflows/build_and_test.yml

@@ -26,8 +26,8 @@ jobs:
         java-version: ${{ matrix.java }}
         distribution: zulu
     - name: Build ktfmt_idea_plugin
-      run: ./gradlew :idea_plugin:build --stacktrace --no-daemon
+      run: ./gradlew :idea_plugin:build --no-daemon
     - name: Build the Online Formatter
-      run: ./gradlew :lambda:build --stacktrace --no-daemon
+      run: ./gradlew :lambda:build --no-daemon
     - name: Build ktfmt
-      run: ./gradlew :ktfmt:build --stacktrace --no-daemon
+      run: ./gradlew :ktfmt:build --no-daemon

.github/workflows/codeql.yml

@@ -0,0 +1,47 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'java-kotlin' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Set up JDK 21
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'zulu'
+        cache: 'gradle'
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: manual
+
+    - name: Build with Gradle
+      run: |
+        ./gradlew :ktfmt:build :lambda:build :idea_plugin:build --no-daemon
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

.github/workflows/publish_artifacts_on_release.yaml

@@ -22,7 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          ref: ${{ github.events.release.tag_name || inputs.release_tag || github.ref }}
+          ref: ${{ github.event.release.tag_name || inputs.release_tag || github.ref }}
 
       - name: Publish IntelliJ plugin to JetBrains Marketplace
         run: ./gradlew :idea_plugin:publishPlugin --stacktrace --no-daemon
@@ -34,7 +34,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          ref: ${{ github.events.release.tag_name || inputs.release_tag || github.ref }}
+          ref: ${{ github.event.release.tag_name || inputs.release_tag || github.ref }}
 
       - id: install-secret-key
         name: Install gpg secret key
@@ -62,11 +62,11 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          ref: ${{ github.events.release.tag_name || inputs.release_tag || github.ref }}
+          ref: ${{ github.event.release.tag_name || inputs.release_tag || github.ref }}
 
       - name: Debug release tag
         run: |
-          echo "Release tag: ${{ github.events.release.tag_name || inputs.release_tag }}"
+          echo "Release tag: ${{ github.event.release.tag_name || inputs.release_tag }}"
 
       - name: Build JAR artifacts
         run: ./gradlew :ktfmt:jar :ktfmt:shadowJar --stacktrace --no-daemon
@@ -77,7 +77,7 @@ jobs:
       - name: Upload JAR artifacts to GitHub Release
         uses: softprops/action-gh-release@v2
         with:
-          tag_name: ${{ github.events.release.tag_name || inputs.release_tag }}
+          tag_name: ${{ github.event.release.tag_name || inputs.release_tag }}
           files: |
             core/build/libs/ktfmt-*.jar
         env:
@@ -88,7 +88,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          ref: ${{ github.events.release.tag_name || inputs.release_tag || github.ref }}
+          ref: ${{ github.event.release.tag_name || inputs.release_tag || github.ref }}
 
       - uses: actions/setup-node@v4