Add unit tests for SBOM ingestion and transformation

- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly.
- Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps.
- Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges.
- Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges.
- Set up project file for the test project with necessary dependencies and configurations.
- Include JSON fixture files for testing purposes.

src/__Libraries/StellaOps.Cryptography.Kms/Fido2Options.cs

@@ -0,0 +1,44 @@
+namespace StellaOps.Cryptography.Kms;
+
+/// <summary>
+/// Configuration for FIDO2-backed signing flows.
+/// </summary>
+public sealed class Fido2Options
+{
+    private TimeSpan metadataCacheDuration = TimeSpan.FromMinutes(5);
+
+    /// <summary>
+    /// Gets or sets the relying party identifier (rpId) used when registering the credential.
+    /// </summary>
+    public string RelyingPartyId { get; set; } = string.Empty;
+
+    /// <summary>
+    /// Gets or sets the credential identifier (Base64Url encoded string).
+    /// </summary>
+    public string CredentialId { get; set; } = string.Empty;
+
+    /// <summary>
+    /// Gets or sets the PEM-encoded public key associated with the credential.
+    /// </summary>
+    public string PublicKeyPem { get; set; } = string.Empty;
+
+    /// <summary>
+    /// Gets or sets the timestamp when the credential was provisioned.
+    /// </summary>
+    public DateTimeOffset CreatedAt { get; set; } = DateTimeOffset.UtcNow;
+
+    /// <summary>
+    /// Gets or sets the cache duration for metadata lookups.
+    /// </summary>
+    public TimeSpan MetadataCacheDuration
+    {
+        get => metadataCacheDuration;
+        set => metadataCacheDuration = value <= TimeSpan.Zero ? TimeSpan.FromMinutes(5) : value;
+    }
+
+    /// <summary>
+    /// Gets or sets an optional authenticator factory hook (mainly for testing or custom integrations).
+    /// </summary>
+    public Func<IServiceProvider, IFido2Authenticator>? AuthenticatorFactory { get; set; }
+}
+