ci(codeql): cron weekly→monthly (cut 3, standards#288)

Per `standards#286` canonical (cut 3, Option B 2026-05-30): convert
CodeQL scheduled run from weekly `0 6 * * 1` to monthly `0 6 1 * *`.
PR-trigger runs unchanged — every PR still gets CodeQL.

Refs `hyperpolymath/standards#288` (campaign).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'   # monthly 1st 06:00 UTC
 
 # Estate guardrail: cancel superseded runs so re-pushes / rebased PR
 # updates do not pile up queued runs against the shared account-wide