[github-actions]

Upgrades the CodeQL CLI from 2.27.2 to
2.27.3.

• .codeql-version pinned to the new release
• every pack under ql/ bumped to match, since a pack tracks the CLI it is compiled for
• the ql-mcp pins in internal/runner/printast.go and internal/harness/copilot.go
  moved to the matching ql-mcp release
• upstream pack dependencies upgraded and lock files refreshed
• the version: pins inside the suites re-pinned from the lock files, and
  customql.ActionsAll kept in step with ql/actions/lib
• make verify passed, including check-versions