[DO NOT MERGE] Integrate getsentry/prevent-cli into codecov-cli

[thomasrockhu-codecov]

This draft PR is a verification-only checkpoint for the prevent-cli reintegration.

Do not merge. The migration plan calls for a subsequent force-update of main to this branch only after every v11.x tag and release has been mirrored and SHA256-verified. See the plan in the cursor workspace for the full procedure.

What this branch contains

integrate-prevent-cli is a byte-identical copy of getsentry/prevent-cli@main (tip f7cb28c4), pushed into codecov/codecov-cli so that CI runs here. main remains untouched at c059f327 for the duration of the migration.

Safety refs

• Branch pre-prevent-migration -> c059f327 (current main tip, rescue branch)
• Tag archive/pre-prevent-migration -> c059f327 (immutable rollback anchor)

Next steps

1. Observe CI results on this PR.
2. Proceed with per-version tag/release mirroring (v11.0.0 -> v11.2.8).
3. Only after every version passes its verification gate, force-update main from this branch.

Made with Cursor