Add action for release draft

[Bertk]

• add release-draft.yml
• update existing actions using read permission for content

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[Copilot]

Pull Request Overview

This PR adds a new release-draft workflow, bumps the .NET SDK version, updates permissions on existing issue workflows, and introduces a CodeQL scanning workflow.

• Bump SDK from 8.0.407 to 8.0.409 in global.json
• Introduce release-draft.yml for automated prerelease drafts
• Add contents: read permission and update action versions in existing issue workflows
• Add codeql.yml for scheduled and PR-triggered CodeQL analysis

Reviewed Changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
global.json	Updated SDK version to 8.0.409
.github/workflows/release-draft.yml	New workflow for automated prerelease drafting
.github/workflows/issue-untriaged.yml	Added contents: read permission and bumped github-script to v7
.github/workflows/issue-inactive.yml	Added contents: read permission
.github/workflows/issue-close.yml	Added contents: read permission
.github/workflows/codeql.yml	New CodeQL scanning workflow configured for C#