fix: create Windows-compatible codeql.cmd wrapper

On Windows, gh codeql install-stub creates a bash script (codeql) which
is not discoverable by Node.js child_process.spawn(). This causes
'spawn codeql ENOENT' errors in integration tests.

Add a step that creates a codeql.cmd wrapper delegating to 'gh codeql'
so that spawn('codeql', ...) resolves correctly on Windows.

Aligns with github/gh-codeql#21 which adds native Windows support to
install-stub. This workaround can be removed once that PR is merged.

Author: data-douser

.github/actions/setup-codeql-environment/action.yml

@@ -149,6 +149,23 @@ runs:
 
         echo "✅ GitHub CLI CodeQL extension installed successfully"
 
+    # On Windows, gh codeql install-stub creates a bash script which is not
+    # discoverable by Node.js child_process.spawn(). Create a .cmd wrapper
+    # so that tools using spawn('codeql', ...) can find the CodeQL CLI.
+    - name: Create Windows-compatible CodeQL CLI wrapper
+      if: runner.os == 'Windows'
+      shell: bash
+      run: |
+        CODEQL_STUB_DIR="$HOME/.local/bin"
+
+        cat > "$CODEQL_STUB_DIR/codeql.cmd" << 'WRAPPER'
+        @echo off
+        gh codeql %*
+        exit /b %errorlevel%
+        WRAPPER
+
+        echo "✅ Created Windows-compatible CodeQL CLI wrapper at $CODEQL_STUB_DIR/codeql.cmd"
+
     - name: Setup CodeQL environment variables
       id: setup-codeql-env
       shell: bash