Deterministic sorting for materialized packages/file-facts and TUI risk rows

[rdzehtsiar]

Motivation

• Ensure exposed lists and TUI rows are stable and deterministic so downstream consumers and tests can rely on ordering.
• Tie-break risk rows with a stable key when scores are equal to avoid flakiness in UI and reports.

Description

• Order Go source package query results by relative_path in finalize_source_dependencies to make materialized source_file_packages deterministic.
• Order file fact materialization results by file_analysis.relative_path in materialize_file_facts so file_facts rows are written in a stable order.
• Change TUI risk row loading in load_risk_rows to ORDER BY score.score DESC, score.relative_path ASC so rows sort by score (descending) then path (ascending) as required.
• Add regression tests: materializes_source_packages_and_file_facts_in_relative_path_order (store reducer tests) and loads_risk_rows_by_score_desc_then_path_asc (TUI tests) to cover deterministic ordering and score tie-breaking.

Testing

• Ran cargo fmt --check and it succeeded.
• Ran cargo test and all unit tests passed (102 passed + CLI tests).
• Ran cargo clippy --all-targets --all-features -- -D warnings and it completed without warnings.
• Ran git diff --check and a search for conflict markers (rg -n '^(<<<<<<<|=======|>>>>>>>)') and found none.

---

Codex Task

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Qodana for Rust

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!