feat: Add version logging to VM scripts for audit trail

[cfsmp3]

Summary

Adds version logging to the CI VM scripts so that test logs include the ccextractor binary version (including Git commit SHA).

Changes:

• Linux runCI: Logs ./ccextractor --version before running tests
• Windows runCI.bat: Logs ccextractorwinfull.exe --version before running tests

This allows verification that the correct binary version was tested by checking the test logs.

Security note: This runs in the isolated GCP VMs, not on the platform server, so there's no security risk from executing the binary.

Test plan

• Verify VM scripts have correct syntax
• Deploy and verify version appears in test logs

🤖 Generated with Claude Code

[codecov]

Codecov Report

❌ Patch coverage is 92.10526% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 86.93%. Comparing base (53b3d7f) to head (e89d17e).

Files with missing lines	Patch %	Lines
mod_ci/controllers.py	92.10%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #951      +/-   ##
==========================================
+ Coverage   86.88%   86.93%   +0.04%     
==========================================
  Files          35       35              
  Lines        3759     3796      +37     
  Branches      767      774       +7     
==========================================
+ Hits         3266     3300      +34     
- Misses        355      357       +2     
- Partials      138      139       +1     

Flag	Coverage Δ
unittests	86.93% <92.10%> (+0.04%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[cfsmp3]

Thanks for the feedback @canihavesomecoffee! You're absolutely right about the security concern.

I've updated the PR to remove all server-side binary execution:

Removed:

• _verify_binary_commit function that executed binaries on the server
• subprocess import
• os.chmod call to make binary executable
• Related tests

Kept:

• Version logging in runCI scripts (runs in isolated GCP VMs)
• Logging of expected commit SHA for audit trail

The VM-based approach is secure because each test runs in a fresh, disposable VM that gets destroyed after the test completes. The runCI scripts already log ccextractor --version output for verification in the test logs.

[canihavesomecoffee]

@cfsmp3 it seems that this PR conflicts a little with the previous one I merged. Care to rebase and fix the merge conflict (if one arises)?

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud