Add CodeQL workflow

Add npm audit to the node workflow

Remove stepsecurity action from workflows

.github/workflows/node-release.yml

@@ -17,14 +17,6 @@ jobs:
       contents: read
       packages: write
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v1
-        with:
-          allowed-endpoints:
-            github.com:443
-            npm.pkg.github.com:443
-            registry.npmjs.org:443
-
       - name: Checkout release
         if: github.event_name != 'workflow_dispatch'
         uses: actions/checkout@v2