Improve CI pipeline and image maintenance

[kikoveiga]

Summary

• Replaces the shared static-analysis pipeline with repository-owned Detekt, Ktlint, Android Lint, license, and generated-file checks aligned with dd-sdk-android.
• Centralizes Ktlint configuration, standardizes source headers, and converts the remaining Groovy build script to Kotlin DSL.
• Replaces JaCoCo and its flaky per-module coverage threshold with Kover 0.9.8 while preserving module-level Datadog coverage uploads.
• Streamlines the CI image and build context, embeds the checksum-verified Java tracer, updates Android tooling, and supports architecture-aware Datadog CI installation.
• Aligns pipeline stage naming and auto-cancels superseded short-lived branch pipelines while protecting stateful jobs.

Validation

• ./gradlew koverXmlReport :build-config:test :dd-sdk-android-gradle-plugin:checkThirdPartyLicences
• ./gradlew ktlintCheck :build-config:ktlintCheck detekt --continue
• ./gradlew checkGeneratedFiles --no-configuration-cache
• ./gradlew lintRelease --continue
• ./gradlew :samples:variants:tasks
• GitLab YAML and diff formatting checks

Notes

• These are CI and build-tooling changes; no plugin version bump is required.
• The manual ci-image job must publish and sign image 19.
• The full image build was not run locally because Docker was unavailable.

[datadog-prod-us1-5]

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 62.62% (-14.00%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 2cfab7e | Docs | View more details | Give us feedback!}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-02T13:39:18.354429Z	2cfab7e	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[0xnm]

what is this line for? we don't have such in dd-sdk-android repo

[0xnm]

maybe use the latest version which is 1.65.1? if it doesn't break anything

[0xnm]

we don't really have "test pyramid" notion here, because we have only 2 layers: unit tests + instrumented

but we can keep it

[0xnm]

what breaks configuration cache here?

[0xnm]

Just noticed that we have the same in Android SDK repo: shouldn't we match task prefix with a stage name? but probably it doesn't matter

[0xnm]

This was in Groovy on purpose, I guess we need either revert this change or admit that we don't acknowledge plugin usage from Groovy build script and have a single samples/variants flavor which is backed by Kotlin buildscript only (which is samples/variants-kotlin currently).