feat: upload file content to file upload api

[florinMiro]

Integrate with the FUA client from GAF and use FUA to upload and execute the analysis.

This PR relies on a small change in GAF, which I'm in the processing of getting ready to merge:
snyk/go-application-framework#666

I've successfully tested these changes with a local build of the CLI.
Interaction id logs

What I will address before merging this PR:

• Bugs in core production logic
• Gaps in test coverage.
• PR feedback

What I will address in a follow-up PR:

• monitoring, and observability improvements for CLI logs as well as CLI analytics.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues
✅	Secrets	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[CLAassistant]

All committers have signed the CLA.

[florinMiro]

Compared to WithInputBundle we can't set the branch, commit_id, or limit_test_to_files properties based on the spec.

I know that limit_test_to_files is used only for IDE analyses, but I'm not sure about the other 2 properties.

This is something I need to check with code-owners

[florinMiro]

Question to clarify with code integrations.

Is it safe to use mustParse here? The testService client already uses must parse to convert the orgId string to a UUID.

[ahmed-agabani-snyk]

This is safe.

The exploration test shows --org=<invalid uuid> gets ignored by the CLI. User experience will default to the user's default org.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 PR contains tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Silently Skipping Files 🟡 [minor] In IsFileSupported, if os.Stat(path) fails (e.g., due to a temporary permission error), the function logs the error but returns false, nil. This results in the file being silently excluded from the scan. It would be safer to return the error so the caller can decide whether to abort or skip, ensuring the user is aware of why specific files might be missing from the results. if fileErr != nil { s.logger.Error().Err(fileErr).Str("filePath", path).Msg("Failed to read file info") return false, nil }

📚 Repository Context Analyzed This review considered 45 relevant code sections from 15 files (average relevance: 1.00) README.md (lines 1-152) internal/analysis/analysis_legacy.go (lines 1-243) internal/commands/code_workflow/code_client_helper.go (lines 1-83) internal/deepcode/client.go (lines 1-269) bundle/mocks/bundle_manager.go (lines 1-83) internal/deepcode/mocks/client.go (lines 1-84) bundle/mocks/bundle.go (lines 1-134) ... and 8 more file(s)

🤖 Repository instructions applied (from AGENTS.md)