Auto-updated submodule references: Bump codeql

Bumps [codeql](https://github.com/github/codeql) from `c18de7d` to `998237e`.
- [Commits](github/codeql@c18de7d...998237e)

---
updated-dependencies:
- dependency-name: codeql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]