BUILD-8880: Yarn shadow scans

[mikolaj-matuszny-ext-sonarsource]

Adds support for Unified Dogfooding in yarn action

[mikolaj-matuszny-ext-sonarsource]

https://next.sonarqube.com/sonarqube/dashboard?id=SonarSource_sonar-dummy-yarn&pullRequest=21
https://sonarcloud.io/summary/new_code?id=SonarSource_sonar-dummy-yarn&pullRequest=21
https://sonarqube.us/summary/new_code?id=SonarSource_sonar-dummy-yarn&pullRequest=21

https://github.com/SonarSource/sonar-dummy-yarn/actions/runs/17094408646/job/48475684594

[sonarqubecloud]

🤖 Pull Request summary

Updates SonarQube integration to support multi-platform shadow scanning for unified platform dogfooding.

• Adds run-shadow-scans input to enable analysis across all 3 SonarQube platforms (next, sqc-eu, sqc-us)
• Refactors vault secrets to fetch credentials for all platforms instead of dynamic selection
• Implements orchestrator pattern with shared common functions for platform-specific scanner execution
• Automatically disables deployment during shadow scans to prevent duplicate artifacts
• Updates documentation to clarify vault permission requirements for all platforms

Focus areas for review:

• The new orchestrator pattern in shared/common-functions.sh and its callback implementation
• Vault permission changes requiring access to all 3 platform credentials
• Deployment prevention logic when shadow scans are enabled

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud