chore: exclude S1313 (hardcoded IP) findings in test fixture data

tests/test_operators/ and tests/test_transformations/ hold literal
test data for the @ipMatch/@geoLookup operators, which is IP addresses
by definition - SonarCloud flagged 5207 instances of "hardcoded IP
address" there, which single-handedly failed the PR's maintainability
quality gate. Scoped to just this rule and these two paths; every
other rule still applies.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: fzipi

sonar-project.properties

@@ -0,0 +1,12 @@
+sonar.projectKey=owasp-modsecurity_ModSecurity
+sonar.organization=owasp-modsecurity
+
+# tests/test_operators/ and tests/test_transformations/ contain literal test
+# data for IP-matching operators (@ipMatch, @geoLookup) - S1313 ("hardcoded
+# IP addresses") is a false positive there, since the whole point of the
+# test is to exercise those exact literals. All other rules still apply.
+sonar.issue.ignore.multicriteria=e1,e2
+sonar.issue.ignore.multicriteria.e1.ruleKey=python:S1313
+sonar.issue.ignore.multicriteria.e1.resourceKey=tests/test_operators/**/*.py
+sonar.issue.ignore.multicriteria.e2.ruleKey=python:S1313
+sonar.issue.ignore.multicriteria.e2.resourceKey=tests/test_transformations/**/*.py