chore(deps): bump github/codeql-action from 4.37.3 to 4.37.4 (#9458)

Merge-train validated (tip 6ce4effef8). Vitest failures confirmed as base-red (#9679).

.github/workflows/docker-publish.yml

@@ -372,7 +372,7 @@ jobs:
       - name: Upload Trivy SARIF to Security tab
         if: needs.prepare.outputs.version != 'main'
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@v4.37.3
+        uses: github/codeql-action/upload-sarif@v4.37.4
         with:
           sarif_file: trivy-results.sarif
           category: trivy-image