fix(ci): exclude template directory from CodeQL and YAML linting

Template files contain Jinja2 syntax that appears as invalid YAML/Python
to static analyzers before cookiecutter rendering. This commit adds
configuration files to exclude the {{cookiecutter.project_slug}}/ directory
from both CodeQL and yamllint analysis.

Changes:
- Add .yamllint config to exclude template directory from YAML validation
- Add .github/codeql-config.yml to exclude templates from code scanning
- Prevents false positives on Jinja2 template syntax ({%-, {{, etc.)

Resolves CodeQL and yamllint false positives on:
- {{cookiecutter.project_slug}}/.github/workflows/release.yml
- {{cookiecutter.project_slug}}/.github/workflows/scorecard.yml

Template files are validated AFTER cookiecutter rendering during
post-generation hooks and in generated project CI workflows.

Author: williaby

.github/codeql-config.yml

@@ -0,0 +1,17 @@
+---
+# CodeQL configuration for cookiecutter-python-template
+# Excludes template files containing Jinja2 syntax from analysis
+
+name: "CodeQL Config"
+
+# Exclude template directory - contains Jinja2 template syntax
+# that appears invalid to static analyzers before rendering
+paths-ignore:
+  - '{{cookiecutter.project_slug}}/**'
+  - '.venv/**'
+  - 'venv/**'
+  - 'node_modules/**'
+  - '.git/**'
+  - 'dist/**'
+  - 'build/**'
+  - '**/*.egg-info/**'

.yamllint

@@ -0,0 +1,21 @@
+---
+# yamllint configuration for cookiecutter-python-template repository
+# Excludes template files that contain Jinja2 syntax from linting
+extends: default
+
+rules:
+  line-length:
+    max: 120
+    level: warning
+  document-start: disable
+  truthy:
+    allowed-values: ['true', 'false', 'yes', 'no']
+
+# Ignore template directory - these files contain Jinja2 syntax
+# that appears invalid to YAML parsers before rendering
+ignore: |
+  {{cookiecutter.project_slug}}/
+  .venv/
+  venv/
+  node_modules/
+  .git/