feat: Implement BerkeleyDB reader for RPM databases

- Added BerkeleyDbReader class to read and extract RPM header blobs from BerkeleyDB hash databases.
- Implemented methods to detect BerkeleyDB format and extract values, including handling of page sizes and magic numbers.
- Added tests for BerkeleyDbReader to ensure correct functionality and header extraction.

feat: Add Yarn PnP data tests

- Created YarnPnpDataTests to validate package resolution and data loading from Yarn PnP cache.
- Implemented tests for resolved keys, package presence, and loading from cache structure.

test: Add egg-info package fixtures for Python tests

- Created egg-info package fixtures for testing Python analyzers.
- Included PKG-INFO, entry_points.txt, and installed-files.txt for comprehensive coverage.

test: Enhance RPM database reader tests

- Added tests for RpmDatabaseReader to validate fallback to legacy packages when SQLite is missing.
- Implemented helper methods to create legacy package files and RPM headers for testing.

test: Implement dual signing tests

- Added DualSignTests to validate secondary signature addition when configured.
- Created stub implementations for crypto providers and key resolvers to facilitate testing.

chore: Update CI script for Playwright Chromium installation

- Modified ci-console-exports.sh to ensure deterministic Chromium binary installation for console exports tests.
- Added checks for Windows compatibility and environment variable setups for Playwright browsers.

src/Cli/StellaOps.Cli/Services/MirrorBundleImportService.cs

@@ -69,7 +69,7 @@ public sealed class MirrorBundleImportService : IMirrorBundleImportService
             var bundleId = GenerateBundleId(manifest);
             var manifestDigest = ComputeDigest(File.ReadAllBytes(manifestResult.ManifestPath));
 
-            var catalogEntry = new BundleCatalogEntry(
+            var catalogEntry = new ImportModels.BundleCatalogEntry(
                 request.TenantId ?? "default",
                 bundleId,
                 manifestDigest,
@@ -79,12 +79,12 @@ public sealed class MirrorBundleImportService : IMirrorBundleImportService
             await _catalogRepository.UpsertAsync(catalogEntry, cancellationToken).ConfigureAwait(false);
 
             // Register individual items
-            var items = manifest.Exports?.Select(e => new BundleItem(
+            var items = manifest.Exports?.Select(e => new ImportModels.BundleItem(
                 request.TenantId ?? "default",
                 bundleId,
                 e.Key,
                 e.ArtifactDigest,
-                e.ArtifactSizeBytes ?? 0)) ?? Enumerable.Empty<BundleItem>();
+                e.ArtifactSizeBytes ?? 0)) ?? Enumerable.Empty<ImportModels.BundleItem>();
 
             await _itemRepository.UpsertManyAsync(items, cancellationToken).ConfigureAwait(false);
 
@@ -238,10 +238,10 @@ public sealed class MirrorBundleImportService : IMirrorBundleImportService
         try
         {
             var envelopeJson = await File.ReadAllTextAsync(dsseFile, cancellationToken).ConfigureAwait(false);
-            var envelope = ImportModels.DsseEnvelope.Parse(envelopeJson);
+            var envelope = StellaOps.AirGap.Importer.Validation.DsseEnvelope.Parse(envelopeJson);
 
             // Load trust roots if provided
-            ImportModels.TrustRootConfig trustRoots;
+            TrustRootConfig trustRoots;
             if (!string.IsNullOrWhiteSpace(trustRootsPath) && File.Exists(trustRootsPath))
             {
                 trustRoots = await LoadTrustRootsAsync(trustRootsPath, cancellationToken).ConfigureAwait(false);
@@ -287,7 +287,7 @@ public sealed class MirrorBundleImportService : IMirrorBundleImportService
         }
     }
 
-    private static async Task<ImportModels.TrustRootConfig> LoadTrustRootsAsync(string path, CancellationToken cancellationToken)
+    private static async Task<TrustRootConfig> LoadTrustRootsAsync(string path, CancellationToken cancellationToken)
     {
         var json = await File.ReadAllTextAsync(path, cancellationToken).ConfigureAwait(false);
         var doc = JsonDocument.Parse(json);
@@ -324,7 +324,7 @@ public sealed class MirrorBundleImportService : IMirrorBundleImportService
             }
         }
 
-        return new ImportModels.TrustRootConfig(path, fingerprints, algorithms, null, null, publicKeys);
+        return new TrustRootConfig(path, fingerprints, algorithms, null, null, publicKeys);
     }
 
     private async Task<List<string>> CopyArtifactsAsync(string bundleDir, string dataStorePath, MirrorBundle manifest, CancellationToken cancellationToken)