fix(ci): skip Docker-dependent PostgreSQL tests in upstream test workflow

- Add [Trait("Category", "RequiresDocker")] to all 3 PostgreSQL test classes
  (PostgreSqlMigrationTests, PostgreSqlProviderTests, PostgreSqlConcurrencyTests)
- Add --filter "Category!=RequiresDocker" to ci-tests.yml dotnet test command
  so runners without Docker don't fail on Testcontainers initialization
- Disable CodeQL workflow in fork (requires upstream org permissions + .NET 10
  CodeQL support that isn't available on our self-hosted runners)

PostgreSQL tests still run in ha-build.yml against the cluster where Docker
is available via the self-hosted ARC runners.

.github/workflows/ci-codeql-analysis.yml

@@ -11,6 +11,8 @@ on:
 jobs:
   analyze:
     name: Analyze
+    # Disabled in fork — upstream CodeQL requires specific GitHub org permissions and .NET 10 support
+    if: false
     runs-on: [self-hosted, k3s, linux, amd64]
 
     strategy: