Add CODEOWNERS file to track ownership of CI templates

We should ensure the relevant teams approve any changes made to their CI templates. In the case of analyzer.yml we must make sure that both groupstatic analysis and groupcomposition analysis approve a change.

TODOs once approved

• Remove default approval group
• Enable codeowners approvals via Protected Branch settings