Disable CodeQL action in private repo and update to latest version

[turbolent]

Description

Port of https://github.com/onflow/cadence-internal/pull/301

The CodeQL action does not currently work in the private repo, as it requires the "Advanced Security" feature of GitHub to be enabled (it is enabled for all public repos for free).

Also, update to the latest version of the action.

Please also review the original PR.

---

• Targeted PR against master branch
• Linked to Github issue with discussion and accepted design OR link to spec that describes this work
• Code follows the standards mentioned here
• Updated relevant documentation
• Re-reviewed Files changed in the Github PR explorer
• Added appropriate labels

[github-actions]

Cadence Benchstat comparison

This branch with compared with the base branch onflow:master commit f9aabc2
The command for i in {1..N}; do go test ./... -run=XXX -bench=. -benchmem -shuffle=on; done was used.
Bench tests were run a total of 7 times on each branch.

Collapsed results for better readability

[SupunS]

Seems like CodeQL is not running for public repo as well 🤔