chore: exclude test files from SonarCloud security hotspot analysis

- Add sonar.security.hotspots.exclusions configuration
- Prevents false positive security warnings on mock URLs in tests
- Test files already excluded from main analysis via sonar.exclusions

Author: igobranco

sonar-project.properties

@@ -20,6 +20,12 @@ sonar.exclusions=\
   **/*.spec.js,\
   **/__tests__/**
 
+# Exclude test files from security hotspot analysis
+sonar.security.hotspots.exclusions=\
+  **/__tests__/**,\
+  **/*.test.js,\
+  **/*.spec.js
+
 # JavaScript/TypeScript settings
 sonar.javascript.lcov.reportPaths=coverage/lcov.info