Auto-updated submodule references: Bump codeql

Bumps [codeql](https://github.com/github/codeql) from `2e981e3` to `ecee427`.
- [Commits](github/codeql@2e981e3...ecee427)

---
updated-dependencies:
- dependency-name: codeql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]