ci: make sonar scan pick up sources

.forgejo/workflows/build.yml

@@ -43,6 +43,11 @@ jobs:
             echo "SONAR_PROJECT_KEY secret not set and no sonar-project.properties entry found" >&2
             exit 1
           fi
+          echo "Sonar project key: $PROJECT_KEY"
+          echo "Listing workspace:"
+          ls -la
+          echo "Sample files:"
+          find . -maxdepth 2 -type f | head -n 20
           docker run --rm \
             -e SONAR_HOST_URL="$HOST_URL" \
             -e SONAR_TOKEN="$SONAR_TOKEN" \
@@ -53,6 +58,7 @@ jobs:
               -Dsonar.host.url="$HOST_URL" \
               -Dsonar.projectKey="$PROJECT_KEY" \
               -Dsonar.sources=. \
+              -Dsonar.inclusions=**/*.js \
               -Dsonar.scm.disabled=true \
               -Dsonar.projectBaseDir=/usr/src