ci(codacy): fix ESLint/PMD/pylint SARIF crash

Add .codacy.yml to disable ESLint (no .eslintrc in web/), PMD (no Java
code), and Prospector; restrict analysis paths to rdagent/ core.
Limit codacy workflow to bandit-only to avoid IndexOutOfBoundsException
at Sarif.scala:185 caused by 14k+ pylint results overwhelming the
SARIF formatter.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.codacy.yml

@@ -0,0 +1,33 @@
+---
+engines:
+  # Disable ESLint — no .eslintrc in web/ frontend directory
+  eslint:
+    enabled: false
+  # Disable PMD — no Java code, no ruleset configured
+  pmd:
+    enabled: false
+  # Disable Prospector — redundant with pylint
+  prospector:
+    enabled: false
+  # Keep bandit for security scanning
+  bandit:
+    enabled: true
+  # Keep pylint but limit scope via exclude_paths below
+  pylint:
+    enabled: true
+
+# Global path exclusions — keeps pylint result count manageable
+# to avoid Codacy SARIF formatter IndexOutOfBoundsException (Sarif.scala:185)
+exclude_paths:
+  - "web/**"
+  - "git_ignore_folder/**"
+  - "workspace/**"
+  - "scripts/**"
+  - "test/**"
+  - "*.md"
+  - "*.txt"
+  - "*.yaml"
+  - "*.yml"
+  - "*.json"
+  - "*.toml"
+  - ".git/**"

.github/workflows/codacy.yml

@@ -50,6 +50,9 @@ jobs:
           format: sarif
           gh-code-scanning-compat: true
           max-allowed-issues: 2147483647
+          # Limit to bandit only — avoids ESLint (no .eslintrc), PMD (no ruleset),
+          # and pylint 14k-result SARIF crash (IndexOutOfBoundsException Sarif.scala:185)
+          tool: bandit
 
       # Upload the SARIF file generated in the previous step
       - name: Upload SARIF results file