feat: Accept repository token for remote config OD-497 (#206)

CI runs with a repository token silently fell back to default tool configuration on init and config reset.

CODACY_PROJECT_TOKEN is the coverage reporter's variable, so it only applies once provider, organization and repository are given.

Co-authored-by: Claude Opus 5 (1M context) <[email protected]>

test: Refresh stale test fixtures OD-497 (#209)

* test: Refresh stale test fixtures OD-497

Goldens snapshot live Codacy API and Trivy DB data that drifted since March, so CI was red on main before any change.

Lizard's unit test now reads a checked-in pattern config instead of fetching defaults, making it independent of the API.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

* test: Refresh init-with-token Lizard fixture OD-497

Same upstream pattern drift as the other fixtures; regenerating this one needs a Codacy API token, so it was rebuilt from the CI diff.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

---------

Co-authored-by: Claude Opus 5 (1M context) <[email protected]>

feat(httpclient): add proxy and TLS support (OD-30) (#205)

Add utils/httpclient factory: honors HTTP_PROXY/HTTPS_PROXY/NO_PROXY,
custom CA via SSL_CERT_FILE, and CODACY_CLI_INSECURE toggle (no insecure
default). Migrate all HTTP callsites. Mirror proxy/TLS warnings into
codacy-cli.log. Document in README.

fix: fix formula SHA (#204)

Update formula (#203)

fix: Fix opengrep config file name (#202)

Fix: ruleIDs mapping for PMD (#201)

* Fix: ruleIDs mapping for PMD

* create test

Security: pin GitHub Actions to SHA hashes (#197)

Replaces mutable tag/branch references with immutable SHA hashes
to prevent supply chain attacks (ref: TeamPCP/Trivy March 2026).

Actions left as tags: 0

Co-authored-by: Codacy Security Bot <[email protected]>

feat: generate and upload trivy SBOM into codacy (#200)

* generate and upload trivy SBOM into codacy

* fix it:tests and codacy review warning fix

Feat/cf 2275 analyze api (#199)

* feat: Fix for already existing config CF-2275

If config does not exist in .codacy/tools-configs
it will first check if the root of the project
contains any configurations.

* feat: Small fix, added tests CF-2275