Find, then filter, SARIF files for upload-sarif Action

[mbg]

This PR changes the approach used by upload-sarif to simplify the complexity of the implementation:

Instead of using findAndUpload, which finds files relevant to an analysis and uploads them, for Code Scanning and Code Quality in turn, the implementation in this PR is based around a new getGroupedSarifFilePaths function which:

• Finds all .sarif files.
• Decides which analysis they belong to.

We then loop through the results of getGroupedSarifFilePaths and upload the SARIF files to the respective endpoint.

Risk assessment

For internal use only. Please select the risk level of this change:

• Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only.

Merge / deployment checklist

• Confirm this change is backwards compatible with existing workflows.
• Consider adding a changelog entry for this change.
• Confirm the readme and docs have been updated if necessary.

[Copilot]

Pull Request Overview

This PR refactors the upload-sarif Action's approach by introducing a "find, then filter" strategy that simplifies the implementation while maintaining backward compatibility.

• Replaces the complex findAndUpload function with a new getGroupedSarifFilePaths function that finds all SARIF files first, then categorizes them by analysis type
• Streamlines the upload logic by processing grouped SARIF files in a single loop
• Moves category fixing logic into the analysis configuration objects for better organization

Reviewed Changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
src/util.ts	Adds typed helper functions for Object.keys and Object.entries
src/upload-sarif.ts	Refactors main upload logic to use new grouping approach, removes findAndUpload function
src/upload-sarif.test.ts	Updates tests to reflect new API structure and removes findAndUpload tests
src/upload-lib.ts	Implements new getGroupedSarifFilePaths function and moves category fixing to uploadSpecifiedFiles
src/upload-lib.test.ts	Adds comprehensive tests for the new grouping functionality
src/analyze.ts	Updates to use analysis-specific category fixing method
src/analyze-action.ts	Simplifies quality upload by removing duplicate category fixing
src/analyses.ts	Adds fixCategory method to analysis configs and introduces helper functions
Generated JS files	Compiled output reflecting TypeScript changes

[Copilot]

The hardcoded check for CodeScanning analysis kind breaks the abstraction pattern. Consider adding a isDefaultAnalysis property to the analysis configuration or restructuring the logic to avoid special-casing specific analysis types.

Suggested change

	analysisConfig.kind === analyses.AnalysisKind.CodeScanning ||
	analysisConfig.isDefaultAnalysis ||