feat(contract): Modify codeql contract to include sast policy group (#2538)

Signed-off-by: Javier Rodriguez <javier@chainloop.dev>

Author: javirln

.github/workflows/contracts/chainloop-vault-codeql.yml

@@ -21,4 +21,5 @@ spec:
   policyGroups:
     - ref: slsa-checks
       with:
-        runner: GITHUB_ACTION
+        runner: GITHUB_ACTION
+    - ref: sast