BUILD-8080: Gradle shadow scans

[mikolaj-matuszny-ext-sonarsource]

BUILD-8079

Adds support for unified dogfooding in Gradle build
Removes echo which is mistakenly added to gradle command

[mikolaj-matuszny-ext-sonarsource]

SonarSource/sonar-dummy-gradle-oss#271

[sonarqubecloud]

🤖 Pull Request summary

Updates Gradle build action to support multi-platform SonarQube analysis.

• Adds run-shadow-scans input parameter to enable analysis across all 3 SonarQube platforms (next, sqc-eu, sqc-us)
• Changes vault credential fetching to always retrieve tokens for all platforms instead of conditionally loading based on sonar-platform
• Implements orchestration logic via shared common functions to coordinate multi-platform scanning
• Prevents artifact deployment when shadow scans are enabled to avoid duplicate deployments
• Updates documentation with new input parameter and vault permission requirements

Focus areas for review:

• The vault credential changes require all 3 platform credentials regardless of settings - ensure this doesn't break existing workflows
• Shadow scan deployment prevention logic in should_deploy() function
• Integration with the new shared orchestration functions

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[matemoln]

What do you think about hardening the implementation of build_gradle_args. Instead of echo "${args[@]}" we could use a variable to store the value. I'm okay if it is not part of this PR but we follow up later.