CodeQlFilters.yml: Glob file patterns in nested directories

[makubacki]

Description

This filter file is picked up both directly in mu_plus but also
downstream repos. Therefore, the file patterns should allow matches
regardless of where a mu_plus submodule or external dependency
may reside in the overall repo structure.

• Impacts functionality?
  • Functionality - Does the change ultimately impact how firmware functions?
  • Examples: Add a new library, publish a new PPI, update an algorithm, ...
• Impacts security?
  • Security - Does the change have a direct security impact on an application,
    flow, or firmware?
  • Examples: Crypto algorithm change, buffer overflow fix, parameter
    validation improvement, ...
• Breaking change?
  • Breaking change - Will anyone consuming this change experience a break
    in build or boot behavior?
  • Examples: Add a new library class, move a module to a different repo, call
    a function in a new library class in a pre-existing module, ...
• Includes tests?
  • Tests - Does the change include any explicit test code?
  • Examples: Unit tests, integration tests, robot tests, ...
• Includes documentation?
  • Documentation - Does the change contain explicit documentation additions
    outside direct code modifications (and comments)?
  • Examples: Update readme file, add feature readme file, link to documentation
    on an a separate Web page, ...

How This Was Tested

• Verified local mu_plus CodeQL build
• Verified downstream (mu_tiano_platforms) CodeQL build that leverages
  the CodeQlFilters.yml file from mu_plus.

Integration Instructions

No change in filtering behavior within mu_plus. Downstream repos that use
mu_plus will see more results auto filtered matching the expectations of
upstream repos.