feat: add PolicyPackSelectorComponent with tests and integration

- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.

tools/zastava-verify-evidence-tar.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+TAR_PATH=${1:-evidence-locker/zastava/2025-12-02/zastava-evidence.tar}
+EXPECTED_SHA=${EXPECTED_SHA:-e1d67424273828c48e9bf5b495a96c2ebcaf1ef2c308f60d8b9c62b8a1b735ae}
+
+if [[ ! -f "$TAR_PATH" ]]; then
+  echo "missing tar: $TAR_PATH" >&2
+  exit 1
+fi
+
+sha=$(sha256sum "$TAR_PATH" | awk '{print $1}')
+if [[ "$sha" != "$EXPECTED_SHA" ]]; then
+  echo "sha mismatch: got $sha expected $EXPECTED_SHA" >&2
+  exit 2
+fi
+
+tmpdir=$(mktemp -d)
+trap 'rm -rf "$tmpdir"' EXIT
+
+tar -xf "$TAR_PATH" -C "$tmpdir"
+(cd "$tmpdir" && sha256sum --check SHA256SUMS)
+
+echo "OK: tar hash matches and inner SHA256SUMS verified"