Shared static-analysis rule files (checkstyle, pmd, spotbugs, forbidden-apis, license, owasp) consumed by the parent's plugin configuration.