fix(ci): build CodeQL analysis through package phase

iban-commons-junit depends on the iban-commons test-jar classifier,
which the maven-jar-plugin only attaches during the package phase.
The CodeQL build stopped at compile with tests skipped entirely, so
the test-jar was never produced and the reactor build failed with a
dependency resolution error. Build through package with -DskipTests
instead, which still compiles the test sources.

Author: spannm

.github/workflows/codeql.yml

@@ -44,14 +44,16 @@ jobs:
                 languages: java-kotlin
                 build-mode: manual
 
-        # Skip checkstyle/tests here: this build only needs to produce compiled
-        # classes for CodeQL to analyze, not to enforce project lint rules.
+        # Build up to package (not just compile): iban-commons-junit depends on
+        # the iban-commons test-jar, which is only attached in the package phase.
+        # Skip checkstyle and running the tests, but still compile them so the
+        # test-jar gets built.
         -   name: Build for CodeQL analysis
             run: >
                 mvn --batch-mode --file pom.xml
                 -Dcheckstyle.skip=true
-                -Dmaven.test.skip=true
-                clean compile
+                -DskipTests
+                clean package
 
         -   name: Perform CodeQL Analysis
             uses: github/codeql-action/analyze@v4