feat: Implement air-gap functionality with timeline impact and evidence snapshot services

- Added AirgapTimelineImpact, AirgapTimelineImpactInput, and AirgapTimelineImpactResult records for managing air-gap bundle import impacts.
- Introduced EvidenceSnapshotRecord, EvidenceSnapshotLinkInput, and EvidenceSnapshotLinkResult records for linking findings to evidence snapshots.
- Created IEvidenceSnapshotRepository interface for managing evidence snapshot records.
- Developed StalenessValidationService to validate staleness and enforce freshness thresholds.
- Implemented AirgapTimelineService for emitting timeline events related to bundle imports.
- Added EvidenceSnapshotService for linking findings to evidence snapshots and verifying their validity.
- Introduced AirGapOptions for configuring air-gap staleness enforcement and thresholds.
- Added minimal jsPDF stub for offline/testing builds in the web application.
- Created TypeScript definitions for jsPDF to enhance type safety in the web application.

docs/risk/samples/explain/console-frame.json

@@ -1,19 +1,22 @@
 {
   "frame_id": "console-explain-001",
   "captured_at": "2025-12-05T00:05:00Z",
+  "ui_version": "1.0.0",
+  "tenant_id": "tenant-default",
   "finding_id": "finding-123",
   "profile_id": "default-profile",
+  "profile_hash": "sha256:profilehash",
   "score": 0.85,
   "severity": "high",
   "gates": ["kev_and_reachability"],
   "top_contributors": [
-    {"factor": "cvss", "contribution": 0.4, "raw": 7.5, "provenance": "sha256:cvsshash"},
-    {"factor": "kev", "contribution": 0.3, "raw": true, "provenance": "sha256:kevhash"},
-    {"factor": "reachability", "contribution": 0.3, "raw": 0.9, "provenance": "sha256:reachhash"}
+    {"factor": "cvss", "contribution": 0.4, "raw": 7.5, "source": "nvd", "provenance": "sha256:cvsshash"},
+    {"factor": "kev", "contribution": 0.3, "raw": true, "source": "cisa", "provenance": "sha256:kevhash"},
+    {"factor": "reachability", "contribution": 0.3, "raw": 0.9, "source": "scanner", "provenance": "sha256:reachhash"}
   ],
-  "provenance": {"job_hash": "sha256:jobhash"},
   "charts": {
-    "donut": {"high": 1},
+    "donut": {"critical": 0, "high": 1, "medium": 0, "low": 0, "informational": 0},
     "stacked": [0.4, 0.3, 0.3]
-  }
+  },
+  "provenance": {"job_hash": "sha256:jobhash", "fixtures": ["sha256:cvsshash", "sha256:kevhash", "sha256:reachhash"]}
 }