Workflow and action maintenance: working-directory, cmake-build skip logic, dependabot robustness, CodeQL suppression

Workflow and action maintenance: working-directory, cmake-build skip logic, dependabot robustness, CodeQL suppression #1687