Add unit tests for SBOM ingestion and transformation

- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly.
- Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps.
- Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges.
- Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges.
- Set up project file for the test project with necessary dependencies and configurations.
- Include JSON fixture files for testing purposes.

src/Api/StellaOps.Api.OpenApi/authority/openapi.yaml

@@ -66,9 +66,13 @@ components:
             graph:write: Enqueue or mutate graph build jobs.
             offline_access: Request refresh tokens for offline access.
             openid: Request OpenID Connect identity tokens.
-            orch:operate: Execute privileged Orchestrator control actions.
-            orch:read: Read Orchestrator job state.
-            policy:author: Author Policy Studio drafts and workspaces.
+            orch:operate: Execute privileged Orchestrator control actions.
+            orch:read: Read Orchestrator job state.
+            packs.read: Read Task Pack definitions and execution history.
+            packs.write: Publish or update Task Packs in the registry.
+            packs.run: Execute Task Packs via Task Runner workflows.
+            packs.approve: Approve Task Pack gates and resume pending runs.
+            policy:author: Author Policy Studio drafts and workspaces.
             policy:activate: Activate policy revisions.
             policy:approve: Approve or reject policy drafts.
             policy:audit: Inspect Policy Studio audit history.