Add clarifying comment for if: always() in CodeQL workflow

Co-authored-by: edburns <75821+edburns@users.noreply.github.com>

Author: Copilot

.github/workflows/codeql.yml

@@ -50,6 +50,8 @@ jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
     needs: changes
+    # Run even if 'changes' is skipped (e.g. on push/schedule where paths-filter
+    # may not flag changes). Each step has its own gate condition.
     if: always()
     runs-on: ubuntu-latest
     permissions: