SC-85878 Set-up SonarQube

[ksza]

Description

We want to keep better track of quality metrics in our projects. SonarQube gives us continuous inspection of code quality & test coverage.

Implementation Details

Updates to the git workflow

• Store relevant artifacts (code coverage, credo analysis) as artifacts
• Download the artifacts in the sonar.yml job
• Report to the sonar server & remove the artifacts
• The reporting step only runs in production builds and does not fail the workflow in case something goes wrong

We don't run reporting in other branches than master as we don't have multi-branch support in SonarQube using the free version.

How to review/test this change

Testing

• The Sonar Analysis job passes and results are available in SonarQube

[shortcut-integration]

This pull request has been linked to Shortcut Story #85878: SonarQube for Opticks.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 636e2a2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[ksza]

You might want to exclude mocks as well to correctly reflect the code coverage.

Maybe smth like

Suggested change

	sonar.exclusions=**/*.test.*
	sonar.exclusions=**/*.test.*,src/mocks/*,