Add SBOM, symbols, traces, and VEX files for CVE-2022-21661 SQLi case

- Created CycloneDX and SPDX SBOM files for both reachable and unreachable images.
- Added symbols.json detailing function entry and sink points in the WordPress code.
- Included runtime traces for function calls in both reachable and unreachable scenarios.
- Developed OpenVEX files indicating vulnerability status and justification for both cases.
- Updated README for evaluator harness to guide integration with scanner output.

src/Findings/StellaOps.Findings.Ledger/Domain/LedgerChainIdGenerator.cs

@@ -0,0 +1,20 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace StellaOps.Findings.Ledger.Domain;
+
+public static class LedgerChainIdGenerator
+{
+    public static Guid FromTenantPolicy(string tenantId, string policyVersion)
+    {
+        ArgumentException.ThrowIfNullOrWhiteSpace(tenantId);
+        ArgumentException.ThrowIfNullOrWhiteSpace(policyVersion);
+
+        var normalized = $"{tenantId.Trim()}::{policyVersion.Trim()}";
+        var bytes = Encoding.UTF8.GetBytes(normalized);
+        Span<byte> guidBytes = stackalloc byte[16];
+        var hash = SHA256.HashData(bytes);
+        hash.AsSpan(0, 16).CopyTo(guidBytes);
+        return new Guid(guidBytes);
+    }
+}