Windows: AccessDeniedException during `codeql database create` TRAP finalization (`pools/0` move fails)

Bắt đầu với lệnh codeql database create và bước hoàn tất việc nhập TRAP của lệnh này, sau đó tái hiện lỗi di chuyển pools\0 trên Windows 11 bằng lệnh và các đường dẫn trong báo cáo. Hoàn thành khi cơ sở dữ liệu JavaScript được hoàn tất thành công mà không có AccessDeniedException.

Title:
Windows: AccessDeniedException during codeql database create TRAP finalization (pools/0 move fails)

Description:

❗ Summary
On Windows 11, running codeql database create for a JavaScript project fails during TRAP import finalization with an AccessDeniedException. This occurs when attempting to move the final TRAP string pool into pools\0.

This happens even when:

• Using a short path (e.g. C:\github\glob-ghas)
• Running in an elevated PowerShell session
• Closing VS Code and other editors
• Disabling Windows Defender and indexing
• Running codeql from CLI (not extension)

💻 Environment

• OS: Windows 11 Pro (Build 26100+)
• CodeQL CLI version: 2.21.1
• Installed at: C:\tools\codeql
• Language: JavaScript
• Command:
  codeql database create my-db --language=javascript --source-root=. --overwrite

📄 Observed Output

Finalizing database at C:\github\glob-ghas\my-db.
Running TRAP import for CodeQL database at C:\github\glob-ghas\my-db...
Importing TRAP files
Merging relations
A fatal error occurred: Failed to move pool from C:\github\glob-ghas\my-db\db-javascript\default\strings\0 to C:\github\glob-ghas\my-db\db-javascript\default\pools\0
(eventual cause: AccessDeniedException ...)

🔄 Steps to Reproduce

1. Create a minimal JS repo under C:\github\glob-ghas
2. Run the CLI command above
3. Observe failure during TRAP finalization

✅ What I've Already Tried

• Using short paths (C:\github)
• Deleting the target DB folder before each run
• Disabling antivirus and indexing services
• Running with --no-autobuild
• Setting TEMP to C:\codeql-temp
• Confirmed no VS Code or Language Server processes active

📌 Expected Behavior
The database should finalize cleanly without permission errors, especially in an elevated shell with a clean local path.

🧩 Additional Help
Happy to provide a zipped repro repo with dummy JavaScript files and a test script upon request.