PartyLayer/PartyLayer: docs/codeql-review.md

CodeQL review of the initial repository baseline Review date: 2026-10-30. The first full default-branch scan reported 52 open alerts after the newly introduced CI action pin was fixed. A PR-only scan does not enumerate the entire default-branch baseline. Scanner severity alone does not establish…