Tests

[Nechja]

This pull request introduces new automated testing workflows, improves test philosophy documentation, and adds robust test coverage for key services. It also strengthens security and reliability in token generation and test execution. The most important changes are grouped below:

CI/CD Automation and Coverage

• Added a comprehensive GitHub Actions workflow in .github/workflows/ci.yml to run tests and collect coverage for all major services and workers (Go, C#, F#, Gleam), ensuring every component is validated on push and pull request.

Testing Philosophy and Documentation

• Updated docs/guide/testing.md to clarify the purpose of tests, discourage trivial tests, and provide guidelines for writing effective, bug-catching tests.

Service-Specific Test Coverage

• Added thorough unit tests for content type validation in src/services/files/internal/service/content_type_test.go, including security checks against dangerous mismatches and normalization logic.
• Added exhaustive tests for event type pattern validation in src/services/events/internal/handler/publish_test.go, covering valid/invalid formats and edge cases.

Security and Permissions

• Introduced servicePermissions in src/services/auth/internal/handler/token_handler.go and updated service token generation to embed permissions for specific service accounts, improving authorization granularity. [1] [2]

Test Runner Reliability

• Updated src/services/testing/src/testing/runner.py to include delays between test categories, preventing gateway rate limiting and ensuring reliable test execution. [1] [2]