Fix the mergeback workflow

The removeNPMAbsolutePaths check requires no newlines at the
end of the file. This ensures that the version update mimics
the behavior.

This should have happened in a mergeback PR, but the workflow to
generate this was broken.

We need to tag and mergeback if the tag does _not_ already exist.

Send version and mode to code scanning via user agent

Update the ql queries to account for change in how we look for runner

Previously, we guarded blocks of code to be run by the runner or the
action using if statements like this:

```js
if (mode === "actions") ...
```

We are no longer doing this. And now, the `unguarded-action-lib.ql`
query is out of date. This query checks that runner code does not
unintentionally access actions-only methods in the libraries.

With these changes, we now ensure that code scanning is happy.

This commit changes the way the action determines if running in action
or runner mode. There is now an environment variable that is set at the
beginning of the process and elsewhere in the process, we can check to
see if the variable is set.

Fix wording in README

Merge main into v1

Minor change.

…stom-queries

Analyze: Log analysis summaries for custom queries

…lease

Add release and mergeback workflows

Ensures that the runner version is bumped along with the action version.

Add Ruby as a possible language

…ersions-upstream-only

Actions: Run enterprise versions workflow only on the parent repo

Merge main into v1

Don't run the cron workflow on forks, since they lack the necessary secrets.

This commit ensures that the changelog is updated before a release with
the correct date and version.

Also, after a release, a mergeback PR is created to ensure that the
changelog update and version bump is available in main.

Use --additional-packs instead of --search-path

Ensure queries[language] objects are initialized