Run SonarQube analysis on the current project using `xy sonar`. Review the output for code quality issues.

Detect the package manager from the repo root (`yarn.lock` → yarn, `pnpm-lock.yaml` → pnpm) and prefix accordingly.

```bash
xy sonar
```
