feat: add code issues workflow for listing Snyk Code issues

[fsargent]

Description

Introduces a new code issues workflow (code.issues) that lists Snyk Code issues for a resolved project via the Snyk REST API.

The workflow resolves a target project either by an explicit --project-id UUID or by looking it up using --remote-repo-url and --target-reference. Once resolved, it fetches issues from the /rest/orgs/{org}/issues endpoint, normalizes them into a consistent structure, and outputs results either as a formatted table or JSON.

Key behaviours:

• Issues are filtered by an --ignored flag (true, false, or all) and an optional --severity-threshold.
• Results are sorted by severity (highest first).
• Pagination is supported via --limit (10–100) and --all to fetch all pages automatically.
• Issue locations are extracted from a range of attribute shapes, including nested coordinates[].representations[].sourceLocation structures.
• The raw JSON:API resource is preserved on each issue in the JSON output.

A new GetCodeIssuesFlagSet() function exposes the flag definitions, and WORKFLOWID_CODE_ISSUES registers the workflow with the engine during Init.

Checklist

• Tests added and all succeed
• Linted
• README.md updated, if user-facing

🚨After having merged, please update the snyk-ls and CLI go.mod to pull in latest client.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[fsargent]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• feat: add code issues workflow for listing Snyk Code issues #157 👈 (View in Graphite)
• feat: add snyk code issues workflow #156
• main

---

How to use the Graphite Merge Queue

Add the label merge-queue to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.