Add unit tests for SBOM ingestion and transformation

- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly.
- Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps.
- Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges.
- Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges.
- Set up project file for the test project with necessary dependencies and configurations.
- Include JSON fixture files for testing purposes.

docs/assets/authority/authority-plugin-component.mmd

@@ -0,0 +1,50 @@
+%% Standard Authority plug-in component overview (Mermaid)
+flowchart LR
+    subgraph Host["Authority Host"]
+        config[AuthorityPluginConfigurationLoader
+(bind + validate options)]
+        pluginHost[PluginHost Registrar Loader
+(IAuthorityPluginRegistrar)]
+        api[Minimal API Endpoints
+/token, /device/code, /internal/*]
+        telemetry[Structured Telemetry
+(logs - metrics - traces)]
+    end
+
+    subgraph StandardPlugin["Standard Identity Provider Plug-in"]
+        registrar[StandardPluginRegistrar
+(registers services, capabilities)]
+        options[StandardPluginOptions
+(offline YAML input)]
+        identity[IIdentityProviderPlugin
+(password & bootstrap flows)]
+        store[StandardUserCredentialStore
+(Mongo collections)]
+        capability[Capability Metadata
+(password, bootstrap, clientProvisioning)]
+    end
+
+    subgraph External["External Systems"]
+        mongo[(MongoDB cluster
+credential + lockout state)]
+        audit[(Audit Sink / Event Bus)]
+        secrets[Offline Secrets Bundle
+(keys, salts, bootstrap users)]
+        opsRepo[(Offline Kit Assets)]
+    end
+
+    config --> registrar
+    pluginHost --> registrar
+    registrar --> options
+    registrar --> capability
+    registrar --> identity
+    identity --> store
+    identity --> audit
+    store --> mongo
+    options --> secrets
+    secrets --> registrar
+    api --> identity
+    telemetry --> opsRepo
+    pluginHost --> telemetry
+    capability --> pluginHost
+    audit --> telemetry