ci: add coverage report and sonarcloud scan on PRs

[radu-mocanu]

Summary

• adds sonar-project.properties and a sonarcloud job that runs after tests
• coverage runs only on the ubuntu/3.13 matrix cell and uploads xml + html artifacts

[Copilot]

Pull request overview

Adds CI support for generating Python coverage reports and running a SonarCloud scan on PRs and pushes to main, using a reusable test workflow.

Changes:

• Add sonar-project.properties for SonarCloud project configuration and coverage ingestion.
• Configure coverage.py via pyproject.toml and generate/upload coverage HTML + XML artifacts from a single matrix cell (Ubuntu / Python 3.13).
• Add a sonarcloud job to the reusable test workflow and pass SONAR_TOKEN from the top-level CI workflow.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
sonar-project.properties	Defines SonarCloud project metadata, source/test paths, and coverage report path.
pyproject.toml	Adds coverage.py run/report configuration for consistent XML/HTML output.
.github/workflows/test.yml	Generates coverage in one matrix cell, uploads artifacts, and adds a SonarCloud scan job.
.github/workflows/ci.yml	Passes SONAR_TOKEN into the reusable test.yml workflow.

Comments suppressed due to low confidence (1)

.github/workflows/test.yml:68

• The SonarCloud job condition needs.test.result != 'failure' is ineffective while the test job has continue-on-error: true (GitHub Actions will not mark the needed job as failure even if pytest fails). This can cause SonarCloud to run (and the workflow to appear successful) despite failing tests; consider removing continue-on-error for the test matrix or tightening the condition so SonarCloud only runs when tests truly succeeded.

    needs: test
    runs-on: ubuntu-latest
    if: always() && needs.test.result != 'failure'
    permissions:

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud