build: add SonarCloud integration

[kelleyglenn]

Summary

• Add SonarCloud static analysis integration via the org.sonarqube Gradle plugin
• Add .github/workflows/sonar.yaml workflow for PR and master branch analysis
• Runs test jacocoTestReport sonar (separate from the existing check workflow)

Prerequisites

The sonar workflow will fail until these manual steps are completed:

1. Import this repo as a SonarCloud project at sonarcloud.io (org: kelleyglenn)
2. Add SONAR_TOKEN as a GitHub Actions secret

Test plan

• Existing check workflow still passes (no build/test changes)
• After SONAR_TOKEN is configured, sonar workflow passes and decorates PRs

🤖 Generated with Claude Code

[github-actions]

Coverage Report

There is no coverage information present for the Files changed

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud