docs: clarify coverage architecture artifacts

[AlexanderLanin]

Why

Make future diagram content edits easier (no-op).

🦬🪒 Yak shaving

• Diagram: Declare artifacts and components explicitly, retain the existing labels and flow, and add type colors.
• PlantUML: Select remotejdk_17 in .bazelrc so diagram rendering works on any runner (e.g. local without java).
• Docs build: Use the current reusable workflow with read-only permissions and pin it to a commit.
• Docs publishing: Add a separate, privileged workflow_run publisher; this fixes fork-PR permission failures.
• Workflow triggers: Build docs for published releases and skip publishing ephemeral merge-group runs.
• Bazel cache: Replace castler/setup-bazel in Tests and format with setup-bazel-cache/v0.1.0, retaining distinct cache keys.
• YAML formatting: Apply the shared .yamlfmt configuration from eclipse-score/score.

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: d2693a16-dd63-4177-821a-7c92ef5bc647
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 0 packages loaded
Loading: 0 packages loaded
Analyzing: target //:license-check (1 packages loaded)
Analyzing: target //:license-check (1 packages loaded, 0 targets configured)
Analyzing: target //:license-check (1 packages loaded, 0 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (5 packages loaded, 6 targets configured)

Analyzing: target //:license-check (15 packages loaded, 10 targets configured)

Analyzing: target //:license-check (89 packages loaded, 10 targets configured)

Analyzing: target //:license-check (147 packages loaded, 578 targets configured)

Analyzing: target //:license-check (151 packages loaded, 3139 targets configured)

Analyzing: target //:license-check (151 packages loaded, 3139 targets configured)

Analyzing: target //:license-check (151 packages loaded, 3139 targets configured)

Analyzing: target //:license-check (161 packages loaded, 7301 targets configured)

Analyzing: target //:license-check (163 packages loaded, 9345 targets configured)

Analyzing: target //:license-check (164 packages loaded, 9365 targets configured)

Analyzing: target //:license-check (164 packages loaded, 9365 targets configured)

Analyzing: target //:license-check (178 packages loaded, 11538 targets configured)

INFO: Analyzed target //:license-check (179 packages loaded, 11662 targets configured).
[4 / 14] checking cached actions
[13 / 16] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 0s disk-cache, processwrapper-sandbox
[14 / 16] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
INFO: Found 1 target...
Target //tools:license.check.license_check up-to-date:
  bazel-bin/tools/license.check.license_check
  bazel-bin/tools/license.check.license_check.jar
INFO: Elapsed time: 33.109s, Critical Path: 2.18s
INFO: 16 processes: 12 internal, 3 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 16 total actions
INFO: Running command line: bazel-bin/tools/license.check.license_check tools/formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[Copilot]

Copilot review overview

🟢 Approval recommended

The changes are internally consistent, pinned where required, and validated by successful formatting, tests, and documentation builds.

Review effort: Balanced
Findings: None

What changed in this PR

Clarifies coverage architecture artifacts and modernizes documentation CI/publishing.

Changes:

• Explicitly distinguishes diagram artifacts and components with colors.
• Separates privileged documentation publishing from read-only builds.
• Updates Bazel runtime, caching, triggers, and YAML formatting.

File	Description
docs/​architecture/​index.rst	Refines the coverage pipeline diagram.
.yamlfmt	Adds shared YAML formatting settings.
.github/​workflows/​tests.yml	Updates caching, permissions, triggers, and docs build.
.github/​workflows/​format.yml	Adopts the shared Bazel cache action.
.github/​workflows/​docs-publish.yml	Adds privileged documentation publishing.
.bazelrc	Selects the remote JDK 17 runtime.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.