chore(ci): add ketryx reporting workflow for compliance and tracking

[muhabalwan-aginx]

Description

• Add Ketryx Compliance Reporting Workflow
• Implements automated test result reporting to Ketryx for regulatory compliance and quality tracking.

Changes:

• Add new report-to-ketryx.yml reusable workflow
• Integrate Ketryx reporting into CI/CD pipeline before releases
• Upload test artifacts (JUnit XML) from both SDK and CLI packages
• Configure JUnit reporter in Vitest for both packages

Workflow Triggers:

• workflow_dispatch: Manual trigger for ad-hoc reporting
• push on tags: Automatic reporting on SDK/CLI releases (sdk-v*, cli-v*)

Technical Details:

• Test results uploaded from Node 20.x matrix job only
• Ketryx action downloads artifacts and reports via API
• Setup Ketryx API and Project ID

[Copilot]

Pull Request Overview

This PR introduces Ketryx integration for compliance reporting and updates CI/CD configurations. The changes include a new reusable Ketryx workflow, modifications to the main CI/CD pipeline to incorporate Ketryx reporting, and an automated update to license attributions.

• Adds a new reusable Ketryx reporting workflow for compliance tracking
• Updates CI/CD pipeline to include Ketryx reporting step and reorganizes job dependencies
• Updates ATTRIBUTIONS.md with corrected license texts and formatting

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 4 comments.

File	Description
.github/workflows/_ketryx_report.yml	New reusable workflow for Ketryx compliance reporting with placeholder test execution
.github/workflows/ci-cd.yml	Removes scheduled runs and CodeQL job, adds Ketryx reporting integration, updates SonarQube action version, changes NPM token references
ATTRIBUTIONS.md	Automated license attribution updates with corrected license texts and copyright notices

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

@@           Coverage Diff           @@
##             main      #34   +/-   ##
=======================================
  Coverage   95.16%   95.16%           
=======================================
  Files           9        9           
  Lines        1034     1034           
  Branches      141      141           
=======================================
  Hits          984      984           
  Misses         50       50           

Flag	Coverage Δ
unittests	95.16% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[santi698]

Suggested change

	workflow_dispatch:
	inputs:
	branch:
	description: 'Branch to test (leave empty for main)'
	required: false
	type: string
	default: ''

[santi698]

Suggested change

	push:
	tags:
	- 'sdk-v*' # Matches semantic-release SDK tags
	- 'cli-v*' # Matches semantic-release CLI tags

To fix the issue, explicitly set the permissions: key in the workflow, limiting GITHUB_TOKEN to the minimal privileges required. Since this workflow only downloads artifacts and calls an external action, it does not require any write access to the repository contents or metadata. The minimal required permission is likely contents: read. Insert permissions: contents: read at the top level of the workflow, below the name key but above on:, so that the permission applies to all jobs within the workflow. No other changes are required; do not grant broader access unless a particular step or action clearly requires it.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud