chore: merge CI + SonarCloud workflows, drop cross-platform job

- Merge sonarcloud-java.yml into ci-java.yml — single build runs
  mvn verify then SonarCloud analysis (was running mvn verify twice)
- Remove cross-platform job (Windows/macOS) — JVM is cross-platform,
  job had continue-on-error:true so never blocked anyway
- SonarCloud only runs for same-repo PRs (skip forks without token)
- Net: 2 fewer CI jobs per push/PR, ~50% faster CI

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: aksOps

.github/workflows/ci-java.yml

@@ -11,6 +11,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
@@ -26,20 +28,14 @@ jobs:
         with:
           name: coverage-report
           path: target/site/jacoco/
-
-  cross-platform:
-    needs: build
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [windows-latest, macos-latest]
-    runs-on: ${{ matrix.os }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
-        with:
-          distribution: 'temurin'
-          java-version: '25'
-          cache: 'maven'
-      - run: mvn clean verify -B -pl . -Dfrontend.skip=true
-        continue-on-error: true
+      - name: SonarCloud analysis
+        if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: >
+          mvn sonar:sonar -B
+          -Dsonar.projectKey=RandomCodeSpace_code-iq
+          -Dsonar.organization=randomcodespace
+          -Dsonar.host.url=https://sonarcloud.io
+          "-Dsonar.exclusions=**/grammar/**,target/generated-sources/**"
+          "-Dsonar.coverage.exclusions=**/grammar/**,target/generated-sources/**"