chore: modernize Poetry dependency groups

[dereknorrbom]

Summary

• Move dev dependencies to the standard [dependency-groups] table supported by modern Poetry.
• Refresh poetry.lock with the current Poetry resolver output.
• Keep package discovery implicit while preserving the built run_codeql wheel contents and console scripts.

Test evidence

• poetry check --lock
• poetry build

Made with Cursor