feat(zastava): add evidence locker plan and schema examples

- Introduced README.md for Zastava Evidence Locker Plan detailing artifacts to sign and post-signing steps.
- Added example JSON schemas for observer events and webhook admissions.
- Updated implementor guidelines with checklist for CI linting, determinism, secrets management, and schema control.
- Created alert rules for Vuln Explorer to monitor API latency and projection errors.
- Developed analytics ingestion plan for Vuln Explorer, focusing on telemetry and PII guardrails.
- Implemented Grafana dashboard configuration for Vuln Explorer metrics visualization.
- Added expected projection SHA256 for vulnerability events.
- Created k6 load testing script for Vuln Explorer API.
- Added sample projection and replay event data for testing.
- Implemented ReplayInputsLock for deterministic replay inputs management.
- Developed tests for ReplayInputsLock to ensure stable hash computation.
- Created SurfaceManifestDeterminismVerifier to validate manifest determinism and integrity.
- Added unit tests for SurfaceManifestDeterminismVerifier to ensure correct functionality.
- Implemented Angular tests for VulnerabilityHttpClient and VulnerabilityDetailComponent to verify API interactions and UI rendering.

src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/PolicyEndpointsTests.cs

@@ -9,7 +9,7 @@ namespace StellaOps.Excititor.WebService.Tests;
 
 public sealed class PolicyEndpointsTests
 {
-    [Fact(Skip = "Skipped in CI: WebApplicationFactory binding blocked in test environment; functional coverage retained in core + contract tests.")]
+    [Fact]
     public async Task VexLookup_ReturnsStatements_ForAdvisoryAndPurl()
     {
         var claims = CreateSampleClaims();
@@ -17,6 +17,7 @@ public sealed class PolicyEndpointsTests
         using var factory = new TestWebApplicationFactory(
             configureServices: services =>
             {
+                TestServiceOverrides.Apply(services);
                 services.RemoveAll<IVexClaimStore>();
                 services.AddSingleton<IVexClaimStore>(new StubClaimStore(claims));
                 services.AddTestAuthentication();

src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj

@@ -42,7 +42,6 @@
     <Compile Include="GraphTooltipFactoryTests.cs" />
     <Compile Include="AttestationVerifyEndpointTests.cs" />
     <Compile Include="OpenApiDiscoveryEndpointTests.cs" />
-    <!-- PolicyEndpointsTests excluded: flakey host binding in this runner; coverage retained via core/unit tests -->
-    <!-- <Compile Include="PolicyEndpointsTests.cs" /> -->
+    <Compile Include="PolicyEndpointsTests.cs" />
   </ItemGroup>
 </Project>