feat: add PolicyPackSelectorComponent with tests and integration

- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.

scripts/packs/__fixtures__/bad/bundle-missing-quota.json

@@ -0,0 +1,49 @@
+{
+  "schemaVersion": "stellaops.pack.offline-bundle.v1",
+  "pack": {
+    "name": "demo-pack",
+    "version": "1.0.0",
+    "bundle": "packs/demo-pack.tgz",
+    "digest": "sha256:c0ffee0000000000000000000000000000000000000000000000000000000000",
+    "registry": "registry.local/demo/demo-pack:1.0.0",
+    "sbom": "sbom.json"
+  },
+  "plan": {
+    "hashAlgorithm": "sha256",
+    "hash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+    "canonicalPlanPath": "canonical-plan.json",
+    "inputsLock": "inputs.lock",
+    "rngSeed": "seed-1111",
+    "timestampSource": "utc-iso8601"
+  },
+  "evidence": {
+    "attestation": "attestation.dsse",
+    "approvalsLedger": "approvals-ledger.dsse"
+  },
+  "security": {
+    "sandbox": {
+      "mode": "sealed",
+      "egressAllowlist": [],
+      "cpuLimitMillicores": 250,
+      "memoryLimitMiB": 256
+    },
+    "revocations": "revocations.json",
+    "signatures": {
+      "bundleDsse": "bundle.dsse",
+      "attestationDsse": "attestation.dsse.sig",
+      "registryCertChain": "certs.pem"
+    },
+    "secretsRedactionPolicy": "redaction-policy.json"
+  },
+  "hashes": [],
+  "slo": {
+    "runP95Seconds": 300,
+    "approvalP95Seconds": 900,
+    "maxQueueDepth": 1000,
+    "alertRules": "alerts.yaml"
+  },
+  "tenant": "demo-tenant",
+  "environment": "dev",
+  "created": "2025-12-05T00:00:00Z",
+  "verifyScriptVersion": "local-fixture"
+}