A security engineer wants their CodeQL code scanning workflow to run additional queries beyond the defaults, including lower-severity and lower-precision rules, to surface more potential issues during an internal audit. They are editing the CodeQL Action step in the workflow. Which configuration should they use to accomplish this?