feat(api): Implement Console Export Client and Models

- Added ConsoleExportClient for managing export requests and responses.
- Introduced ConsoleExportRequest and ConsoleExportResponse models.
- Implemented methods for creating and retrieving exports with appropriate headers.

feat(crypto): Add Software SM2/SM3 Cryptography Provider

- Implemented SmSoftCryptoProvider for software-only SM2/SM3 cryptography.
- Added support for signing and verification using SM2 algorithm.
- Included hashing functionality with SM3 algorithm.
- Configured options for loading keys from files and environment gate checks.

test(crypto): Add unit tests for SmSoftCryptoProvider

- Created comprehensive tests for signing, verifying, and hashing functionalities.
- Ensured correct behavior for key management and error handling.

feat(api): Enhance Console Export Models

- Expanded ConsoleExport models to include detailed status and event types.
- Added support for various export formats and notification options.

test(time): Implement TimeAnchorPolicyService tests

- Developed tests for TimeAnchorPolicyService to validate time anchors.
- Covered scenarios for anchor validation, drift calculation, and policy enforcement.

src/Web/StellaOps.Web/README.md

@@ -34,6 +34,23 @@ Run `ng build` to build the project. The build artifacts will be stored in the `
 
 `verify:chromium` prints every location inspected (environment overrides, system paths, `.cache/chromium/`). Set `CHROME_BIN` or `STELLAOPS_CHROMIUM_BIN` if you host the binary in a non-standard path.
 
+### Headless Karma recipe (offline-friendly)
+
+For local, deterministic Karma runs without system Chrome:
+
+```bash
+cd src/Web/StellaOps.Web
+CHROME_BIN=$(pwd)/node_modules/playwright/.local-browsers/chromium-1140/chrome-linux/chrome \
+LD_LIBRARY_PATH=$(pwd)/.deps/usr/lib/x86_64-linux-gnu:$LD_LIBRARY_PATH \
+npx ng test --watch=false --browsers=ChromeHeadless --progress=false \
+  --include src/app/features/policy-studio/editor/policy-editor.component.spec.ts \
+  --source-map=false
+```
+
+- The `.deps` folder carries the minimal NSS/GTK libs we vendor for air-gapped nodes.
+- Use one `--include` per invocation; Angular CLI rejects multiple `--include` flags.
+- Monaco is file-replaced with a lightweight test stub during Karma runs; production builds are unaffected.
+
 ## Runtime configuration
 
 The SPA loads environment details from `/config.json` at startup. During development we ship a stub configuration under `src/config/config.json`; adjust the issuer, client ID, and API base URLs to match your Authority instance. To reset, copy `src/config/config.sample.json` back to `src/config/config.json`: