fix(ci): Ensure CodeQL comment workflow only runs on success

The 'CodeQL - Post Comment' workflow was failing intermittently because it would attempt to download an artifact that was not always present. This occurred when the upstream 'CodeQL Analysis' workflow did not produce the artifact, for example, when it failed or when no new alerts were found.

This change modifies the trigger condition for the 'post-comment' job to only run when the upstream 'CodeQL Analysis' workflow has a conclusion of 'success'. This ensures that the artifact is guaranteed to exist, resolving the recurring failures.

Author: google-labs-jules[bot]

.github/workflows/codeql-comment.yaml

@@ -13,7 +13,7 @@ permissions:
 jobs:
   post-comment:
     runs-on: ubuntu-latest
-    if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion != 'cancelled'
+    if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'
     steps:
       - name: Download PR comment data
         uses: actions/download-artifact@fa0a91b85d4f404e8442c7c958156baef1102941 # v4.1.8