Add SonarCloud snapshot and generated Sonar findings for PR #3540

[Easton97-Jens]

Motivation

• Create a reproducible, auditable snapshot of SonarCloud and GitHub PR data for PR Prototype 2: Evaluating alternatives to YAJL for JSON processing owasp-modsecurity/ModSecurity#3540 to support a fresh Sonar re-analysis.
• Capture current, source-backed findings so reviewers can validate which Sonar issues were opened, closed or remain open for the JSON backend area.

Description

• Add an analysis/ folder containing raw API snapshots: pr3540_pull.json, pr3540_commits.json, pr3540_qg.json, pr3540_measures.json, pr3540_issues_open.json, pr3540_issues_closed.json, and pr3540_hotspots.json.
• Add generated, human-readable artifacts derived from the snapshots: pr3540_all_findings_table.md, pr3540_open_findings_table.md, and pr3540_summary.json.
• The snapshots reflect the current PR head 9c29515ef87b85baaf22bcb004c4403cd14ed0ce and Sonar measures/quality gate for owasp-modsecurity_ModSecurity on pull request 3540.

Testing

• Queried the GitHub PR metadata with curl (GitHub API) and saved the response to analysis/pr3540_pull.json, which contains the PR head SHA 9c29515ef87b85baaf22bcb004c4403cd14ed0ce.
• Queried SonarCloud endpoints with curl to collect project_status, measures/component, issues/search (open and closed) and hotspots/search, and saved the responses under analysis/; those requests completed and produced the files listed above.
• The Sonar quality gate for the PR returned status OK and the measures snapshot was successfully saved as analysis/pr3540_measures.json.

---

Codex Task