feat(ir): wire SonarQubePublish@8 builder into task-step validation

Integrates the SonarQubePublish@8 typed builder with the front-matter task-step advisory validation added in #1096: derives Deserialize keyed on the ADO pollingTimeoutSec input (deny_unknown_fields, flex str/int) and registers it in parse.rs VALIDATORS.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jamesadevine

src/compile/ir/tasks/parse.rs

@@ -37,8 +37,8 @@ use super::{
     helm_installer, java_tool_installer, manual_validation, maven, maven_authenticate, node_tool,
     npm, npm_authenticate, nuget_authenticate, nuget_command, pip_authenticate, powershell,
     publish_build_artifacts, publish_code_coverage_results, publish_pipeline_artifact,
-    publish_test_results, python_script, twine_authenticate, universal_packages, use_dotnet,
-    use_node, use_python_version, use_ruby_version, vs_build, vstest,
+    publish_test_results, python_script, sonar_qube_publish, twine_authenticate, universal_packages,
+    use_dotnet, use_node, use_python_version, use_ruby_version, vs_build, vstest,
 };
 
 /// Registry mapping an ADO task id (`"CopyFiles@2"`) to a validator that checks
@@ -93,6 +93,7 @@ const VALIDATORS: &[(&str, fn(Value) -> Result<(), String>)] = &[
         validate_by_deserialize::<publish_pipeline_artifact::PublishPipelineArtifact>,
     ),
     ("PublishTestResults@2", validate_by_deserialize::<publish_test_results::PublishTestResults>),
+    ("SonarQubePublish@8", validate_by_deserialize::<sonar_qube_publish::SonarQubePublish>),
     ("TwineAuthenticate@1", validate_by_deserialize::<twine_authenticate::TwineAuthenticate>),
     ("UseDotNet@2", validate_by_deserialize::<use_dotnet::UseDotNet>),
     ("UseNode@1", validate_by_deserialize::<use_node::UseNode>),
@@ -690,6 +691,29 @@ mod tests {
         assert!(err.contains("NodeTool@0"), "got: {err}");
     }
 
+    #[test]
+    fn roundtrip_sonar_qube_publish() {
+        assert_roundtrips(sonar_qube_publish::SonarQubePublish::new().into_step());
+        assert_roundtrips(
+            sonar_qube_publish::SonarQubePublish::new()
+                .polling_timeout_sec(600)
+                .into_step(),
+        );
+    }
+
+    #[test]
+    fn sonar_qube_publish_unknown_input_warns() {
+        let step = yaml(
+            r#"
+            task: SonarQubePublish@8
+            inputs:
+              bogusInput: nope
+            "#,
+        );
+        let err = validate_task_step(&step).expect("recognized").unwrap_err();
+        assert!(err.contains("SonarQubePublish@8"), "got: {err}");
+    }
+
     #[test]
     fn registry_has_no_duplicate_task_ids() {
         let mut ids: Vec<&str> = VALIDATORS.iter().map(|(id, _)| *id).collect();

src/compile/ir/tasks/sonar_qube_publish.rs

@@ -1,6 +1,7 @@
 //! Typed builder for `SonarQubePublish@8`.
 
 use crate::compile::ir::step::TaskStep;
+use serde::Deserialize;
 
 /// Builder for a [`TaskStep`] invoking `SonarQubePublish@8`.
 ///
@@ -13,9 +14,16 @@ use crate::compile::ir::step::TaskStep;
 ///
 /// ADO task reference:
 /// <https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/sonar-qube-publish-v8-task>
-#[derive(Debug, Clone)]
+#[derive(Debug, Clone, Deserialize)]
+#[serde(deny_unknown_fields)]
 pub struct SonarQubePublish {
-    polling_timeout_sec: Option<u32>,
+    #[serde(
+        rename = "pollingTimeoutSec",
+        default,
+        deserialize_with = "super::common::de_opt_str_or_int"
+    )]
+    polling_timeout_sec: Option<String>,
+    #[serde(skip)]
     display_name: Option<String>,
 }
 
@@ -35,7 +43,7 @@ impl SonarQubePublish {
     /// `pollingTimeoutSec` — maximum seconds to wait for the Quality Gate
     /// result. ADO default is `300`.
     pub fn polling_timeout_sec(mut self, secs: u32) -> Self {
-        self.polling_timeout_sec = Some(secs);
+        self.polling_timeout_sec = Some(secs.to_string());
         self
     }
 
@@ -53,7 +61,7 @@ impl SonarQubePublish {
                 .unwrap_or_else(|| "Publish Quality Gate Result".into()),
         );
         if let Some(secs) = self.polling_timeout_sec {
-            t = t.with_input("pollingTimeoutSec", secs.to_string());
+            t = t.with_input("pollingTimeoutSec", secs);
         }
         t
     }