Merged in feature/service-accounts-1 (pull request #227)

Support for service accounts with static credentials

* feature complete

* tests and docs

* lint fix

scripts/tests.yml

@@ -57,6 +57,7 @@ tasks:
         docker ps -a --format '{{.Names}}' | grep -E '_test_queryorchestration' | xargs -r docker rm -f 2>/dev/null || true
         echo "Cleanup complete"
   functional:
+    desc: "Run functional tests with coverage (incremental: only packages changed vs origin/main)"
     vars:
       INCREMENTAL: "{{.INCREMENTAL | default \"true\"}}"
     cmds:
@@ -145,23 +146,34 @@ tasks:
       - rm -f {{.COVERAGE_FILE}}
       - task: functional
   race:
-    - task: wait
-    - go test -race {{.TESTS}}
+    desc: "Run the test suite with the Go race detector enabled"
+    cmds:
+      - task: wait
+      - go test -race {{.TESTS}}
   graph:
-    - task: wait
-    - psrecord "task test:functional" --plot out/test.png --interval 0.1 --include-children
-  timeline: |
-    GOMAXPROCS={{.THREAD_PARALLEL}} go test \
-    -p {{.PKG_PARALLEL}} -parallel {{.TEST_PARALLEL}} \
-    -json -count=1 {{.TESTS}} | go run github.com/roblaszczak/vgt@latest
+    desc: "Run test:functional under psrecord and plot CPU/memory to out/test.png"
+    cmds:
+      - task: wait
+      - psrecord "task test:functional" --plot out/test.png --interval 0.1 --include-children
+  timeline:
+    desc: "Render a test execution timeline using vgt from JSON test output"
+    cmds:
+      - |
+        GOMAXPROCS={{.THREAD_PARALLEL}} go test \
+        -p {{.PKG_PARALLEL}} -parallel {{.TEST_PARALLEL}} \
+        -json -count=1 {{.TESTS}} | go run github.com/roblaszczak/vgt@latest
   wait:
+    desc: "Wait for testcontainers (Ryuk) to exit, then prune unused docker resources"
     cmds:
       - docker wait $(docker ps -q --filter "label=org.testcontainers.ryuk=true") 2>/dev/null || true
       - task: prune
   prune:
-    - docker container prune -f
-    - docker volume prune -f
+    desc: "Prune stopped docker containers and unused volumes"
+    cmds:
+      - docker container prune -f
+      - docker volume prune -f
   mem:
+    desc: "Profile memory usage per package and report the top consumers"
     vars:
       NUM_RESULTS: 5
       RESULTS_FILE: "{{ .OUT_DIR }}/mem.out"
@@ -247,6 +259,7 @@ tasks:
         echo "Total packages tested: $total_packages"
         echo "Total memory usage: ${total_mem} MB"
   perf:
+    desc: "Report the slowest packages and tests using JSON test output"
     vars:
       NUM_RESULTS: 5
     cmds:
@@ -272,6 +285,7 @@ tasks:
           'select(.Action == "pass" and .Test != null and .Package == $pkg) | "\(.Elapsed)s \(.Test)"' "{{.TEST_FILE}}" |
           sort -rn | head -n {{.NUM_RESULTS}}
   bench:
+    desc: "Run Go benchmarks across all packages and summarize with benchstat"
     vars:
       TMP_FILE: "{{.OUT_DIR}}/coverage.tmp"
       FILTER_COVERAGE_FILE: "{{.OUT_DIR}}/filtered_coverage.out"
@@ -280,6 +294,7 @@ tasks:
       - go test -run ^Benchmark -bench=. ./... > {{.BENCH_FILE}}
       - benchstat {{.BENCH_FILE}}
   unit:short:
+    desc: "Run quick unit tests (`go test -short`) on internal and api packages"
     cmds:
       - mkdir -p {{.OUT_DIR}}
       - task: wait