* [SDL] Enable CodeQL in separate pipeline  with TSA

* Address feedback

* Move CodeQL manual tasks

* [build] Move internal variables to template

* Guard Manual CodeQL tasks with isSourceBuild