Add SBOM, symbols, traces, and VEX files for CVE-2022-21661 SQLi case

- Created CycloneDX and SPDX SBOM files for both reachable and unreachable images.
- Added symbols.json detailing function entry and sink points in the WordPress code.
- Included runtime traces for function calls in both reachable and unreachable scenarios.
- Developed OpenVEX files indicating vulnerability status and justification for both cases.
- Updated README for evaluator harness to guide integration with scanner output.

src/__Libraries/StellaOps.Cryptography.Plugin.CryptoPro/CryptoProGostProviderOptions.cs

@@ -0,0 +1,24 @@
+using System.Collections.Generic;
+
+namespace StellaOps.Cryptography.Plugin.CryptoPro;
+
+public sealed class CryptoProGostProviderOptions
+{
+    private readonly IList<CryptoProGostKeyOptions> keys = new List<CryptoProGostKeyOptions>();
+
+    /// <summary>
+    /// CryptoPro-backed keys managed by the provider.
+    /// </summary>
+    public IList<CryptoProGostKeyOptions> Keys => keys;
+
+    public CryptoProGostProviderOptions Clone()
+    {
+        var clone = new CryptoProGostProviderOptions();
+        foreach (var key in keys)
+        {
+            clone.Keys.Add(key.Clone());
+        }
+
+        return clone;
+    }
+}