Add unit tests for SBOM ingestion and transformation

- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly.
- Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps.
- Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges.
- Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges.
- Set up project file for the test project with necessary dependencies and configurations.
- Include JSON fixture files for testing purposes.

etc/notify.airgap.yaml

@@ -0,0 +1,51 @@
+# Notify WebService configuration — air-gapped bootstrap profile
+#
+# This template ships inside the Bootstrap Pack so operators can stage
+# deterministic notifier settings without reaching external services. The
+# values align with the docker-compose.airgap.yaml profile and the defaults
+# produced by the Offline Kit builder. Update the connection string and
+# Authority endpoints if your environment uses different hosts.
+
+storage:
+  driver: mongo
+  connectionString: "mongodb://stellaops:airgap-password@mongo:27017"
+  database: "stellaops_notify_airgap"
+  commandTimeoutSeconds: 45
+
+authority:
+  enabled: true
+  issuer: "https://authority.airgap.local"
+  metadataAddress: "https://authority.airgap.local/.well-known/openid-configuration"
+  requireHttpsMetadata: true
+  allowAnonymousFallback: false
+  backchannelTimeoutSeconds: 30
+  tokenClockSkewSeconds: 60
+  audiences:
+    - notify
+  viewerScope: notify.viewer
+  operatorScope: notify.operator
+  adminScope: notify.admin
+
+api:
+  basePath: "/api/v1/notify"
+  internalBasePath: "/internal/notify"
+  tenantHeader: "X-StellaOps-Tenant"
+
+plugins:
+  baseDirectory: "/opt/stellaops"
+  directory: "plugins/notify"
+  searchPatterns:
+    - "StellaOps.Notify.Connectors.*.dll"
+  orderedPlugins:
+    - StellaOps.Notify.Connectors.Email
+    - StellaOps.Notify.Connectors.Webhook
+
+telemetry:
+  enableRequestLogging: true
+  minimumLogLevel: Information
+
+# In sealed/air-gapped mode, outbound connectors are constrained by the
+# shared EgressPolicy facade. Channels that point to loopback services (SMTP
+# relay, syslog forwarder, file sink) are permitted; external webhooks are
+# denied until the host is unsealed or allow-listed. Review
+# docs/modules/notify/bootstrap-pack.md for the full bootstrap workflow.