Modernize SARIF contextual training for CodeQL v4

[felickz]

Summary

Modernize SARIF contextual training for current CodeQL and code scanning behavior.

• preserve the CodeQL tool name by default, with renameCodeQLTool: true for the legacy compatibility workaround
• add IntegrationId=github while retaining the existing github-sarif-action:<owner> partner tracking
• add optional Secure Code Warrior languageKey support
• cache, serialize, throttle, timeout, and retry Direct Linking API requests
• make enrichment idempotent and recover missing entries after partial API failures
• suppress phrase matches that duplicate CWE training destinations
• resolve SARIF rules by component identity, ID, index, name, and GUID
• update the runtime to Node 24 and document the CodeQL v4 post-processing workflow
• expand unit coverage and modernize CI actions

Motivation

The existing action still works with CodeQL v4, but currently renames the tool to GitHub CodeQL. Live ingestion testing confirmed current code scanning retains enriched help.markdown while the tool remains CodeQL, allowing CodeQL-specific integrations to remain intact.

Validation

• npm run all
• 10 Jest suites, 78 tests
• ESLint and ncc bundle generation
• fork CI: https://github.com/forks-felickz/github-action-add-sarif-contextual-training/actions/runs/33705704102
• published-action baseline: Test published Secure Code Warrior SARIF action testing-felickz/scw-test#4
• enriched baseline alert: https://github.com/testing-felickz/scw-test/security/code-scanning/4

The published action was tested unchanged before implementing these updates, confirming the existing workflow and providing a comparison for tool-name and duplicate-training behavior.