github: Only run CI for latest commit in a branch, cancel old runs

.github/workflows/codeql.yml

@@ -2,6 +2,10 @@ name: "CodeQL"
 
 on: [push, pull_request]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 env:
   CCACHE_BASEDIR: ${{ github.workspace }}
   CCACHE_COMPRESS: true