fix(ci): preserve PD and Store coverage aggregation

[contrueCT]

Purpose of the PR

• close [Bug] JaCoCo coverage is overwritten across PD/Store CI test profiles #3160

PD and Store CI run several Maven test profiles in separate invocations, but
each invocation previously replaced JaCoCo execution data and generated a
partial report. PD also ran mvn clean package after two coverage-producing
test profiles, deleting their data before upload. As a result, Codecov could
receive only the last profile's coverage or an imprecisely selected report.

The existing JaCoCo 0.8.4 configuration also cannot instrument Java 17 class
files, which blocks the project's planned Java 17 migration.

Main Changes

• Move the PD clean/package step before all coverage-producing test profiles.
• Upgrade PD and Store JaCoCo plugins from 0.8.4 to 0.8.8 and append execution
  data across Maven invocations.
• Assign a deterministic JaCoCo session ID to every selected PD/Store test
  profile and verify the complete expected session set before upload.
• Require at least one non-skipped Surefire test for every selected suite.
  Exclude the existing Store core/server placeholder suites from the coverage
  gate until they contain real tests.
• Generate one aggregate XML report during verify and upload that exact file
  to Codecov.
• Parse the aggregate JaCoCo XML structurally, rejecting malformed XML and
  comment-only evidence while accepting valid attribute reordering.
• Require non-zero instruction coverage for the instrumented PD common/client/
  core groups and Store common/client/RocksDB groups. Keep zero-class and
  externally executed aggregate dependencies as presence-only checks.
• Include hg-store-rocksdb as a direct report-aggregate dependency only in
  the jacoco profile so normal Store test dependency resolution is unchanged.
• Run EditorConfig before tests create RocksDB runtime files, then skip only
  that already-completed check during the final aggregate-only verify.
• Add validator and contract tests for malformed arguments, missing reports,
  zero-test and all-skipped suites, malformed and spoofed XML, reordered
  attributes, uncovered reports and individual required groups, missing
  sessions/modules, Maven lifecycle bindings, dependency scope, exact workflow
  inputs, and timeout behavior without GNU coreutils.

Verifying these changes

• Trivial rework / code cleanup without any test coverage. (No Need)
• Already covered by existing tests, such as (please modify tests here).
• Need tests and can be verified as follows:
  • hugegraph-server/hugegraph-dist/src/assembly/travis/test-check-jacoco-report.sh
  • Parse .github/workflows/pd-store-ci.yml and all changed POMs.
  • mvn -q apache-rat:check -N -ntp
  • mvn editorconfig:check -pl hugegraph-server/hugegraph-dist -am -ntp
  • mvn editorconfig:check -pl hugegraph-pd/hg-pd-test -am -ntp
  • mvn editorconfig:check -pl hugegraph-store/hg-store-test -am -ntp
  • mvn verify -pl hugegraph-pd/hg-pd-test -am -P jacoco -DskipTests -Deditorconfig.skip=true -ntp
  • mvn verify -pl hugegraph-store/hg-store-test -am -P jacoco -DskipTests -Deditorconfig.skip=true -ntp
  • Verify the normal Store dependency tree still resolves PowerMock's
    org.javassist:javassist:3.24.0-GA.
  • Java 17 smoke: JaCoCo 0.8.4 rejects class-file major version 61, while
    0.8.8 instruments the same class and writes execution data successfully.

The complete four-suite PD/four-suite Store workflow and the external Codecov
upload are left to GitHub Actions because the local environment uses JDK 17
while this workflow currently installs JDK 11.

Does this PR potentially affect the following parts?

• Dependencies (add/update license info & regenerate_known_dependencies.sh)
• Modify configurations
• The public API
• Other affects (PD/Store CI coverage collection and upload)
• Nope

Documentation Status

• Doc - TODO
• Doc - Done
• Doc - No Need

[imbajin]

Blocking: no. Summary: The aggregate report and Maven lifecycle checks pass, but the validator can accept incomplete suite/module coverage and can hang on malformed arguments. Evidence: Exact-head PD/Store aggregate builds and validator contract tests passed; current-head CI Codecov uploads returned HTTP 429 and exited 0.

[imbajin]

Blocking: yes. Summary: The Store CI job drops two existing test suites while still publishing an aggregate coverage report, so the coverage gate no longer represents the full Store test scope. Evidence: exact-head .github/workflows/pd-store-ci.yml patch and hg-store-test/pom.xml suite definitions.

[imbajin]

Blocking: yes. Summary: The coverage workflow now exercises the intended PD/Store profiles and produces aggregate reports, but the validator still permits false-positive coverage evidence in two paths. Evidence: exact-head CI is green, while the findings below concern the validator's acceptance criteria and local contract portability.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.66%. Comparing base (431f6e6) to head (a63e48e).

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #3161      +/-   ##
============================================
- Coverage     41.06%   38.66%   -2.40%     
- Complexity      519      553      +34     
============================================
  Files           771      735      -36     
  Lines         65962    63318    -2644     
  Branches       8766     8431     -335     
============================================
- Hits          27088    24485    -2603     
- Misses        36008    36106      +98     
+ Partials       2866     2727     -139     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[imbajin]

Blocking: yes. Summary: The current coverage gate still accepts an all-skipped suite, and the new validator contract harness is not portable to stock macOS. Evidence: exact-head validator/workflow diff, Surefire parsing at check-jacoco-report.sh:98-110, and the contract harness timeout invocation.

[imbajin]

It's important to point out the critical CI issue to ensure the test coverage & code quality