Convert .codeqlmanifest.json file to codeql-workspace.yml

[aeisenberg]

Also add an explanation about why codeql/javascript-experimental-atm-model isn't in the workspace file.

[aeisenberg]

Looks like Check synchronized files is broken on main right now. When that gets fixed, I'll re-run the job here and it should pass. The failure is unrelated to my change.

[henrymercer]

This was a deliberate design choice, albeit one that we could have documented better.

Most users will want to run codeql pack install to install the model pack from the registry. Users will only want to resolve the local model pack if they are running ML-powered queries with a custom model. Therefore by default we want the model pack to be resolved from the package cache.

Does .codeqlmanifest.json support JSON with comments so we can document this inline?

[aeisenberg]

Does .codeqlmanifest.json support JSON with comments so we can document this inline?

No, but we probably should convert this file to codeql-workspace.yml which has the same semantics and does support comments.

[aeisenberg]

@henrymercer I changed this PR to convert to the codeql-workspace.yml file, and I added an appropriate comment.

[henrymercer]

LGTM, suggest we also update the PR description.