chore: add SonarCloud static analysis workflow

Adds SonarCloud configuration and GitHub Action workflow for automated
code quality and security scanning on PRs and pushes to main. Runs
Jest with coverage and uploads results to SonarCloud.

Requires org admin to:
1. Register the project at sonarcloud.io
2. Add SONAR_TOKEN to repository secrets

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: eran132

.github/workflows/sonarcloud.yml

@@ -0,0 +1,37 @@
+name: SonarCloud Analysis
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  sonarcloud:
+    name: SonarCloud Scan
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.head.repo.fork == false
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run unit tests with coverage
+        run: npx jest --coverage --coverageReporters=lcov
+
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarqube-scan-action@v5
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

sonar-project.properties

@@ -0,0 +1,14 @@
+sonar.projectKey=hasadna_open-bus-map-search
+sonar.organization=hasadna
+sonar.projectName=open-bus-map-search
+
+sonar.sources=src
+sonar.tests=src
+sonar.test.inclusions=**/*.test.ts,**/*.test.tsx,**/*.spec.ts
+sonar.exclusions=**/node_modules/**,**/*.spec.ts,**/*.stories.tsx
+sonar.coverage.exclusions=**/*.test.ts,**/*.test.tsx,**/*.spec.ts,**/*.stories.tsx
+
+sonar.javascript.lcov.reportPaths=coverage/lcov.info
+sonar.typescript.lcov.reportPaths=coverage/lcov.info
+
+sonar.sourceEncoding=UTF-8