Organize fakemui folder: email components complete, docs consolidated

- Email components (Phase 2 COMPLETE):
  * Fixed 18 broken imports: @metabuilder/fakemui/hooks → ../../../src/utils/useAccessible
  * Renamed email-wip/ → email/ (production-ready)
  * Enabled exports in react/components/index.ts
  * All 22 email components now production-ready (1244 lines)

- Cleanup:
  * Removed wip/ directory (duplicate of src/utils/accessibility)
  * Preserved 15 Python/PyQt6 implementation files (full implementations, not stubs)
  * Moved 7 markdown files to fakemui/docs/ (better organization)

- Documentation:
  * Updated CLAUDE.md: Phase 2 email complete, added deletion safety gotcha
  * Created plan: txt/FAKEMUI_REORGANIZATION_PLAN_2026-02-01.txt

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.github/codeql/codeql-config.yml

@@ -0,0 +1,42 @@
+name: "MetaBuilder CodeQL Config"
+
+# CodeQL configuration for semantic code search across 2-3M LOC codebase
+# Purpose: Enable pattern search, caller analysis, data flow queries for story planning
+# NOT for security gates - that's handled by gated-pipeline.yml
+
+# Paths to analyze (focus on source, exclude generated)
+paths:
+  - frontends
+  - codegen
+  - workflowui
+  - packages
+  - fakemui/react
+  - workflow/plugins
+  - dbal
+  - services
+  - hooks
+  - redux
+
+# Paths to ignore (generated, vendor, tests, archives)
+paths-ignore:
+  - '**/node_modules/**'
+  - '**/.next/**'
+  - '**/dist/**'
+  - '**/build/**'
+  - '**/__pycache__/**'
+  - '**/test-results/**'
+  - '**/playwright-report/**'
+  - '**/coverage/**'
+  - 'old/**'
+  - 'txt/**'
+  - 'spec/**'
+  - '**/*.test.ts'
+  - '**/*.test.tsx'
+  - '**/*.spec.ts'
+  - '**/*.spec.tsx'
+  - '**/e2e/**'
+
+# Query suites - security-and-quality provides comprehensive code analysis
+# This enables rich semantic queries for code search, not just security scanning
+queries:
+  - uses: security-and-quality