@

ci: replace legacy frontend path filters with frontend/** glob

The CI, CodeQL, and release workflows still gated on a per-extension
list (**.js, **.html, **.css, **.cjs, ...) left over from the old
Vue/JS UI. That list missed .tsx entirely, so React component edits
never triggered the workflows, and carried dead entries like **.cjs.
Replace the whole enumeration with a single frontend/** glob in all
three so any change under frontend/ triggers build/test/analysis,
while keeping **.go, go.mod, go.sum, **.sh, and the service-file paths.
@

.github/workflows/codeql.yml

@@ -10,21 +10,13 @@ on:
       - "**.go"
       - "go.mod"
       - "go.sum"
-      - "**.js"
-      - "**.mjs"
-      - "**.cjs"
-      - "**.ts"
-      - "frontend/package-lock.json"
+      - "frontend/**"
   pull_request:
     paths:
       - "**.go"
       - "go.mod"
       - "go.sum"
-      - "**.js"
-      - "**.mjs"
-      - "**.cjs"
-      - "**.ts"
-      - "frontend/package-lock.json"
+      - "frontend/**"
   schedule:
     - cron: "18 2 * * 2"