If we're running on push, then we can reintroduce the logic that skips
running with `tools: latest` when it would be the same as running with
`tools: null`.

 And adds a permissions block to the README.

Add a separate job that analyses the multilanguage test repo's Ruby code.
For now, run this only with the latest released CodeQL build from defaults.json.
The cached builds and nightly builds don't support Ruby yet.

In future, we can update this and other PR checks to test a wider range of cases.

This runs checks on reopened draft PRs to support triggering PR checks
on draft PRs that were opened by other workflows.

PR checks won't be triggered on PRs created by Actions workflows.
Therefore mark PRs created by workflows as draft to prompt maintainers
to take the PR out of draft, thereby triggering PR checks.

Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>

This is for PR #607, 'source-root' input test case.

As this test is using only JS, it's not necessary to compile or analyze the other languages.

…tion into source-root-input

Moving the files into ../action was causing the job to fail because it couldn't find the test directory anymore. According to @adityasharad, these 'mv's should
not be necessary. Removing these means changing the path to the actions.

I'm also removing the 'config-file' input to keep the test minimal. I think this will mean that CodeQL will use the default query suite, so I hope that this doesn't change the results.

The test is not related to packaging.

Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>

This config file 'ought to have some queries good for testing!