Add QA test outputs, build scripts, and Dockerfile validation

- Created `qa-test-output-after-fix.txt` and `qa-test-output.txt` to log results of certificate page authentication tests.
- Added `build.sh` for deterministic backend builds in CI, utilizing `go list` for efficiency.
- Introduced `codeql_scan.sh` for CodeQL database creation and analysis for Go and JavaScript/TypeScript.
- Implemented `dockerfile_check.sh` to validate Dockerfiles for base image and package manager mismatches.
- Added `sourcery_precommit_wrapper.sh` to facilitate Sourcery CLI usage in pre-commit hooks.

frontend/src/api/featureFlags.test.ts

@@ -0,0 +1,26 @@
+import { vi, describe, it, expect } from 'vitest'
+
+// Mock the client module which is an axios instance wrapper
+vi.mock('./client', () => ({
+  default: {
+    get: vi.fn(() => Promise.resolve({ data: { 'feature.cerberus.enabled': true } })),
+    put: vi.fn(() => Promise.resolve({ data: { status: 'ok' } })),
+  },
+}))
+
+import { getFeatureFlags, updateFeatureFlags } from './featureFlags'
+import client from './client'
+
+describe('featureFlags API', () => {
+  it('fetches feature flags', async () => {
+    const flags = await getFeatureFlags()
+    expect(flags['feature.cerberus.enabled']).toBe(true)
+    expect(vi.mocked(client.get)).toHaveBeenCalled()
+  })
+
+  it('updates feature flags', async () => {
+    const resp = await updateFeatureFlags({ 'feature.cerberus.enabled': false })
+    expect(resp).toEqual({ status: 'ok' })
+    expect(vi.mocked(client.put)).toHaveBeenCalledWith('/feature-flags', { 'feature.cerberus.enabled': false })
+  })
+})