v2.5.4
github: ensure we update the apt repo before we install packages
github: enable CodeQL code scanning and analysis