Idea: Integrate SonarCloud PR reviews

[moshekaplan]

SonarCloud is similar to Coverity, in that they provide free access to their scanner to open-source projects which generates a list of bugs and potential issues. While it appeared to also have false positives, there were a significant number of detections that might be worth remediating.

Sign up link: https://www.sonarsource.com/products/sonarcloud/signup/

Note:
No GitHub action is needed, if SonarCloud is configured through their web frontend.