fix(codeql): correct target pattern and fail loudly on analysis errors

[Komal362000]

Fixes two issues found in the nightly CodeQL workflow:

1. Corrected --target from //score/message_passing/... //score/mw/com/...
   to //score/message_passing //score/mw/com (removes recursive wildcard).

2. Replaced silent os.system() calls in analyze_database with
   subprocess.run(..., check=True) so analysis failures are caught
   immediately instead of silently producing missing output files.

Without this fix, the nightly job fails at the SARIF upload step with
"Path does not exist" because the analysis silently errored out earlier.
failed pr (#521)