Add Code Quality and Security CI Workflow

[Santiago1010]

📋 Summary

Implement comprehensive code quality and security checks workflow for GitHub Actions, including linting, formatting, security audits, test coverage, and documentation validation.

🎯 Type of Change

• Bug fix (non-breaking change)
• New feature (adds functionality)
• Breaking change (breaks existing functionality)
• Documentation update
• Code refactoring (no functional changes)
• Performance improvement
• Test coverage improvement
• Build system changes
• CI/CD changes

🔍 What Changed

Added

• New GitHub Actions workflow at .github/workflows/code-quality.yml
• Automated linting and formatting checks using Biome
• Dependency security auditing with configurable severity levels
• Test coverage analysis with threshold enforcement
• Documentation validation for API endpoints
• PR comment summaries with quality report

Changed

• N/A (new workflow file)

Fixed

• N/A

Removed

• N/A

🧪 Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing completed
• All tests passing

Test Instructions:

1. Create a pull request to test automatic workflow triggering
2. Verify all quality checks run and report status correctly
3. Check PR comments for quality report summary
4. Test manual dispatch with custom coverage and audit thresholds

🔗 Related Issues

• Closes Integrate CI code-quality and dependency-audit checks (biome, audit-ci, coverage gating) #62

📝 Additional Notes

Workflow includes concurrency control to prevent multiple runs on same PR, artifact retention for reports, and optional Codecov integration. Configurable via workflow inputs for coverage thresholds and audit severity levels.

✅ Checklist

• Follows project style guidelines
• Self-reviewed my code
• Commented complex logic
• Updated documentation
• No new warnings
• Existing and new tests pass locally

[github-actions]

🔍 Code Quality Report

Check	Status	Details
Biome Lint	✅ passed	Static code analysis
Code Formatting	✅ passed	Style consistency
Security Audit	❌ failed	0 vulnerabilities (if any)
Test Coverage	❌ failed	N/A% overall coverage
Documentation	❌	API docs validation

---

⚠️ Security Alert: Vulnerabilities detected. Review the audit report artifact.
⚠️ Coverage Warning: Tests failed or coverage below threshold.

📦 Artifacts: Download detailed reports from the workflow run page.

_{Workflow: Code Quality & Security Checks | Run: #1}