feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries

- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys.
- Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations.
- Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.

src/Scanner/StellaOps.Scanner.WebService/Contracts/OrchestratorEventContracts.cs

@@ -226,28 +226,40 @@ internal sealed record ReportDeltaPayload
     public IReadOnlyList<string>? Kev { get; init; }
 }
 
-internal sealed record ReportLinksPayload
-{
-    [JsonPropertyName("ui")]
-    [JsonPropertyOrder(0)]
-    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
-    public string? Ui { get; init; }
-
-    [JsonPropertyName("report")]
-    [JsonPropertyOrder(1)]
-    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
-    public string? Report { get; init; }
-
-    [JsonPropertyName("policy")]
-    [JsonPropertyOrder(2)]
-    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
-    public string? Policy { get; init; }
-
-    [JsonPropertyName("attestation")]
-    [JsonPropertyOrder(3)]
-    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
-    public string? Attestation { get; init; }
-}
+internal sealed record ReportLinksPayload
+{
+    [JsonPropertyName("report")]
+    [JsonPropertyOrder(0)]
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public LinkTarget? Report { get; init; }
+
+    [JsonPropertyName("policy")]
+    [JsonPropertyOrder(1)]
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public LinkTarget? Policy { get; init; }
+
+    [JsonPropertyName("attestation")]
+    [JsonPropertyOrder(2)]
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public LinkTarget? Attestation { get; init; }
+}
+
+internal sealed record LinkTarget(
+    [property: JsonPropertyName("ui"), JsonPropertyOrder(0), JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)] string? Ui,
+    [property: JsonPropertyName("api"), JsonPropertyOrder(1), JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)] string? Api)
+{
+    public static LinkTarget? Create(string? ui, string? api)
+    {
+        if (string.IsNullOrWhiteSpace(ui) && string.IsNullOrWhiteSpace(api))
+        {
+            return null;
+        }
+
+        return new LinkTarget(
+            string.IsNullOrWhiteSpace(ui) ? null : ui,
+            string.IsNullOrWhiteSpace(api) ? null : api);
+    }
+}
 
 internal sealed record FindingSummaryPayload
 {