Use Sonarqube to analyse issues in this project

[arobirosa]

Current situation:
The QA analysis is done using SpotBugs, PMD und Checkstyle locally and the number of checked rules is low.

Future situation:
Use a QA analysis tool like Sonarqube to analyse the code if there are advantages over the current approach

Further information

• Ant qa currently breaks the build if there is an issue, this feature must stay
• https://sonarcloud.io/ is free for open-source projects

[arobirosa]

Required properties on local.properties:

######################################
## Sonarqube ##
######################################

sonar.projectName = Hybris
sonar.projectKey = Hybris
sonar.projectVersion = 1.0
sonar.extensions = <EXTENSION>
sonar.host.url = https://sonarqube.<URL>.de
sonar.login = <TOKEN>
sonar.coverage.exclusions = de.hybris.*
sonar.coverage.jacoco.xmlReportPaths = ${HYBRIS_LOG_DIR}/jacoco/jacoco.xml
sonar.junit.reportPaths = ${HYBRIS_LOG_DIR}/log/junit/
sonar.junit.reportPath = ${HYBRIS_LOG_DIR}/log/junit/
sonar.java.source=1.11