I am guessing this is where I write the scheduled queries...But where does this sit ? config.yaml? queries.yaml?

If you're using

fleetctl

you can apply any file you want. The name shouldn't matter.