Fix CI workflow failures

[MarcelRaschke]

Summary

Fixes all CI workflow failures identified in the repository:

Configuration fixes

• clang-format: Changed Standard: Cpp17 to c++17 (clang-format-14 uses lowercase enum values)
• codeql.yml: Removed non-existent config-file: .github/codeql/codeql-config.yml reference
• main.yml: Combined duplicate if: keys on "Upload Trivy SARIF" step into single condition

Tool-specific fixes

• cppcheck.yml: Added --suppress=unknownMacro for GL_TYPE_STRING (Kodi build-system macro)
• semgrep.yml: Use --sarif output directly instead of fragile jq JSON-to-SARIF conversion
• owasp-zap.yml: Updated Docker image from owasp/zap2docker-weekly:latest to ghcr.io/zaproxy/zaproxy:stable
• fuzzing.yml: Install AFL++ via apt instead of using non-existent oss-fuzz-base:latest image
• sonarqube.yml: Added libpng-dev to apt-get install (required by CMake dependency)
• kodi-addon-checks.yml: Support visualization.matrix/addon.xml.in path (actual location in repo)
• snyk.yml: Use snyk code test command for C/C++ support instead of --all-projects

All fixes are CI infrastructure corrections. No source code changes were needed.

Verification

Each fix addresses a specific, demonstrated failure from the CI run logs:

• clang-format: error: unknown enumerated scalar at line 29
• codeql: configuration file does not exist
• main.yml: workflow file parsing error (duplicate keys)
• cppcheck: unknownMacro error for GL_TYPE_STRING
• semgrep: Cannot index string with string "check_id" in jq
• owasp-zap: repository does not exist for zap2docker-weekly
• fuzzing: Docker pull failure for oss-fuzz-base
• sonarqube: Package 'libpng' not found
• kodi-addon-checks: No addon.xml or addon.xml.in found
• snyk: No supported files found

Closes #1

[greptile-apps]

Your trial has ended. Reactivate Greptile to resume code reviews.