Add ESLint and Hadolint reports for SonarQube analysis

- Add sonar.eslint.reportPaths and sonar.docker.hadolint.reportPaths
- Generate ESLint JSON report in CI frontend and sonarqube jobs
- Generate Hadolint JSON reports for dev and prod Dockerfiles
- Add reports to ci.yml and sonarqube.yml workflows

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/sonarqube.yml

@@ -82,6 +82,16 @@ jobs:
       - name: PHPUnit with coverage
         run: vendor/bin/phpunit --coverage-clover coverage.xml
 
+      - name: ESLint report
+        run: bunx eslint assets/ --ext .js,.ts -f json -o eslint-report.json || true
+
+      - name: Hadolint
+        run: |
+          wget -qO hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
+          chmod +x hadolint
+          ./hadolint docker/php/dev/Dockerfile -f json > hadolint-dev.json || true
+          ./hadolint docker/php/prod/Dockerfile -f json > hadolint-prod.json || true
+
       - name: SonarQube Scan
         uses: sonarsource/sonarqube-scan-action@v5
         with: