Fix SonarQube error and refine trigger conditions

The SonarQube weekly analysis workflow was failing due to a missing
`compile_commands.json` file. This occurs because the build-wrapper
output directory was previously referenced with an incorrect path
containing an unintended quotation mark, causing the CFamily plugin
to abort with a NoSuchFileException.

This change fixes the failure by aligning the workflow with
SonarCloud recommended usage.

Additionally, this commit updates the workflow triggers and
execution conditions:

- Added explicit triggers for push/PR events when the workflow
  file itself is modified, enabling validation of workflow
  changes
- Allow PRs to validate the build process while preventing unauthorized
  SonarCloud access

The workflow will now:
- Run all build steps in PRs for validation purposes
- Execute SonarQube scans only on:
  * Weekly scheduled runs (apache/cloudberry only)
  * Manual workflow dispatch (apache/cloudberry only)
  * Push to main branch when workflow file changes
    (apache/cloudberry only)

Author: tuhaihe

.github/workflows/sonarqube.yml

@@ -32,6 +32,7 @@
 # Triggers:
 # - Weekly schedule
 # - optional manual dispatch.
+# - Changes on sonarqube.yml file
 #
 # Notes:
 # - SONARCLOUD_TOKEN secret is provided by the ASF Infra team
@@ -42,6 +43,14 @@ on:
   schedule:
   - cron: "0 0 * * 1"
   workflow_dispatch:
+  push:
+    branches:
+      - main
+    paths:
+      - '.github/workflows/sonarqube.yml'
+  pull_request:
+    paths:
+      - '.github/workflows/sonarqube.yml'
 
 permissions:
   contents: read
@@ -112,9 +121,10 @@ jobs:
         build-wrapper-linux-x86-64 --out-dir ${{ env.BUILD_WRAPPER_OUT_DIR }} make -j$(nproc)
 
     - name: SonarQube Scan
+      if: ${{ github.event_name != 'pull_request' }}
       uses: SonarSource/sonarqube-scan-action@v6
       env:
         SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
       with:
         args: >
-          --define sonar.cfamily.compile-commands="${{ env.BUILD_WRAPPER_OUT_DIR }}/compile_commands.json"
+          --define "sonar.cfamily.compile-commands=${{ env.BUILD_WRAPPER_OUT_DIR }}/compile_commands.json"