feat(api): Implement Console Export Client and Models

- Added ConsoleExportClient for managing export requests and responses.
- Introduced ConsoleExportRequest and ConsoleExportResponse models.
- Implemented methods for creating and retrieving exports with appropriate headers.

feat(crypto): Add Software SM2/SM3 Cryptography Provider

- Implemented SmSoftCryptoProvider for software-only SM2/SM3 cryptography.
- Added support for signing and verification using SM2 algorithm.
- Included hashing functionality with SM3 algorithm.
- Configured options for loading keys from files and environment gate checks.

test(crypto): Add unit tests for SmSoftCryptoProvider

- Created comprehensive tests for signing, verifying, and hashing functionalities.
- Ensured correct behavior for key management and error handling.

feat(api): Enhance Console Export Models

- Expanded ConsoleExport models to include detailed status and event types.
- Added support for various export formats and notification options.

test(time): Implement TimeAnchorPolicyService tests

- Developed tests for TimeAnchorPolicyService to validate time anchors.
- Covered scenarios for anchor validation, drift calculation, and policy enforcement.

docs/api/vex-consensus.md

@@ -1,14 +1,25 @@
 # VEX Consensus Stream Contract (draft placeholder)
 
-**Status:** TODO · awaiting VEX Lens Guild
+**Status:** Draft v0.2 · owner-proposed
 
 ## Scope
 - `/vex/consensus` streaming APIs via Web gateway with tenant RBAC/ABAC, caching, and telemetry.
 
-## Needed from owners
-- SSE/stream envelope (fields, heartbeats, retry/backoff headers), sample NDJSON stream.
-- RBAC/ABAC requirements and caching rules; idempotency/correlation headers.
-- Error codes and rate limits.
+## Endpoint
+- `GET /vex/consensus/stream` — SSE stream of consensus VEX statements per tenant.
 
-## TODO
-- Insert finalized contract + samples; note schema hash/date; reference in Web V sprint log.
+Headers: `Authorization: DPoP <token>`, `DPoP: <proof>`, `X-StellaOps-Tenant`, optional `If-None-Match`.
+Scopes (proposal): `vex:read` and `vex:consensus`.
+
+Events (draft)
+- `started`: `{ tenantId, streamId, status }`
+- `consensus_update`: `{ statementId, state, justification, validFrom, validUntil, sources[], etag }`
+- `heartbeat`: `{ streamId, ts }`
+- `completed`: `{ streamId, status }`
+- `failed`: `{ streamId, code, message }`
+
+Rate limits: heartbeats every 30s; idle timeout 90s; backoff via `Retry-After` header on reconnect.
+
+Samples: `docs/api/vex-consensus-sample.ndjson`
+
+Outstanding: finalize scopes, error codes, cache/etag semantics, and add pagination/replay guidance.