1.4.1

Tagged release.

• Preserve scheduled CodeQL scans while removing duplicate analysis workflows.
• Retain CodeQL configuration identity and pin the existing baseline categories.

No public API changes.