contrib, doc, share and qa do not compile production code, skip CodeQL on PRs to save everyone time and GitHub some cpu ticks.
- only audit production code (no python) - trigger on *-maint and *-dev push - trigger on PR - remove useless autogenerated comments - skip doc changes - use depends system without analyzing it - cache depends