ci: include failsafe coverage in Sonar

Add report-integration JaCoCo execution (writes jacoco-it.xml) and
set sonar.coverage.jacoco.xmlReportPaths to both jacoco.xml and
jacoco-it.xml so integration-test coverage is sent to SonarCloud.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: dfa1

pom.xml

@@ -81,6 +81,12 @@
 			**/fbs/**,
 			**/proto/**
 		</sonar.coverage.exclusions>
+		<!-- Both surefire (jacoco.xml) and failsafe (jacoco-it.xml) reports sent to Sonar.
+		     The failsafe report is produced by the report-integration execution in the coverage profile. -->
+		<sonar.coverage.jacoco.xmlReportPaths>
+			${project.build.directory}/site/jacoco/jacoco.xml,
+			${project.build.directory}/site/jacoco-it/jacoco.xml
+		</sonar.coverage.jacoco.xmlReportPaths>
 		<!-- Default for the {@code @{argLine}} placeholder in surefire/failsafe configs. JaCoCo's
 		     {@code prepare-agent} goal overwrites this with the agent arguments when active; if
 		     the {@code coverage} profile is not enabled the empty default ensures surefire
@@ -387,6 +393,13 @@
 									<goal>report</goal>
 								</goals>
 							</execution>
+							<execution>
+								<id>report-integration</id>
+								<phase>post-integration-test</phase>
+								<goals>
+									<goal>report-integration</goal>
+								</goals>
+							</execution>
 						</executions>
 					</plugin>
 				</plugins>