Bump code-ql action to v2

[phenixblue]

What would you like to be added:

CodeQL Action v1 will be deprecated on December 7th, 2022. Please upgrade to v2. For more information, see https://github.blog/changelog/2022-04-27-code-scanning-deprecation-of-codeql-action-v1/

Why is this needed:

Keep security scanning up to date