initial implementation of basic CodeQL SAST workflow copied from Sam's prototyping earlier this year.

Also add some debuggery related to CodeQL

Turns out, the 'container:' keyword for GitHub Actions just runs docker run ..., and you can specify
arguments for the docker run through 'containers:' with --options

…ype_sast

…etra

…nfigs

This test was turned off for base RHEL7 configs, but left on for new RHEL8 configs.
The test was causing failures for RHEL8 configs.

Moved the disabling of this test to inside the rhel8 no-package-enables configuration as the previous location of the base rhel8 config was not
being inherited from for no-package-enables rhel8