feat: add PolicyPackSelectorComponent with tests and integration

- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.

docs/observability/vuln-telemetry.md

@@ -0,0 +1,18 @@
+# Vuln Telemetry (Md.XI draft)
+
+> Status: DRAFT — waiting on DevOps telemetry plan and GRAP0101. Keep TODO until metrics/logs finalized and hashed.
+
+## Scope
+- Metrics, logs, tracing, dashboards, SLOs for Vuln Explorer.
+
+## Dependencies
+- DevOps telemetry plan (due 2025-12-16 sync).
+- GRAP0101 identifiers for labels.
+
+## Outline
+- Metrics: findings_open_total, mttr, triage_actions, report_generation_seconds.
+- Logs: structured fields (findingId, artifactId, advisory, policyVersion, actor, actionType).
+- Traces: key spans; sampling guidance.
+- Dashboards: to be added with hashes.
+
+_Last updated: 2025-12-05 (UTC)_