ci: bump actions/checkout to v3 also for CodeQL Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>