Configure CodeQL scanning for C++

Currently, our CodeQL configuration only scans Python. We can add C++, but it [requires extra configuration work](https://docs.github.com/en/enterprise-cloud@latest/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages). We should do that for enhanced security scanning.