feat: Add CVSS receipt management endpoints and related functionality

- Introduced new API endpoints for creating, retrieving, amending, and listing CVSS receipts.
- Updated IPolicyEngineClient interface to include methods for CVSS receipt operations.
- Implemented PolicyEngineClient to handle CVSS receipt requests.
- Enhanced Program.cs to map new CVSS receipt routes with appropriate authorization.
- Added necessary models and contracts for CVSS receipt requests and responses.
- Integrated Postgres document store for managing CVSS receipts and related data.
- Updated database schema with new migrations for source documents and payload storage.
- Refactored existing components to support new CVSS functionality.

src/Concelier/__Tests/StellaOps.Concelier.Connector.Cccs.Tests/Internal/CccsMapperTests.cs

@@ -6,36 +6,36 @@ using StellaOps.Concelier.Connector.Common.Html;
 using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Storage.Mongo.Documents;
 using Xunit;
-
-namespace StellaOps.Concelier.Connector.Cccs.Tests.Internal;
-
-public sealed class CccsMapperTests
-{
-    [Fact]
-    public void Map_CreatesCanonicalAdvisory()
-    {
-        var raw = CccsHtmlParserTests.LoadFixture<CccsRawAdvisoryDocument>("cccs-raw-advisory.json");
-        var dto = new CccsHtmlParser(new HtmlContentSanitizer()).Parse(raw);
-        var document = new DocumentRecord(
-            Guid.NewGuid(),
-            CccsConnectorPlugin.SourceName,
-            dto.CanonicalUrl,
-            DateTimeOffset.UtcNow,
-            "sha-test",
-            DocumentStatuses.PendingMap,
-            "application/json",
-            Headers: null,
-            Metadata: null,
-            Etag: null,
-            LastModified: dto.Modified,
-            GridFsId: null);
-
-        var recordedAt = DateTimeOffset.Parse("2025-08-12T00:00:00Z");
-        var advisory = CccsMapper.Map(dto, document, recordedAt);
-
-        advisory.AdvisoryKey.Should().Be("TEST-001");
-        advisory.Title.Should().Be(dto.Title);
-        advisory.Aliases.Should().Contain(new[] { "TEST-001", "CVE-2020-1234", "CVE-2021-9999" });
+
+namespace StellaOps.Concelier.Connector.Cccs.Tests.Internal;
+
+public sealed class CccsMapperTests
+{
+    [Fact]
+    public void Map_CreatesCanonicalAdvisory()
+    {
+        var raw = CccsHtmlParserTests.LoadFixture<CccsRawAdvisoryDocument>("cccs-raw-advisory.json");
+        var dto = new CccsHtmlParser(new HtmlContentSanitizer()).Parse(raw);
+        var document = new DocumentRecord(
+            Guid.NewGuid(),
+            CccsConnectorPlugin.SourceName,
+            dto.CanonicalUrl,
+            DateTimeOffset.UtcNow,
+            "sha-test",
+            DocumentStatuses.PendingMap,
+            "application/json",
+            Headers: null,
+            Metadata: null,
+            Etag: null,
+            LastModified: dto.Modified,
+            PayloadId: null);
+
+        var recordedAt = DateTimeOffset.Parse("2025-08-12T00:00:00Z");
+        var advisory = CccsMapper.Map(dto, document, recordedAt);
+
+        advisory.AdvisoryKey.Should().Be("TEST-001");
+        advisory.Title.Should().Be(dto.Title);
+        advisory.Aliases.Should().Contain(new[] { "TEST-001", "CVE-2020-1234", "CVE-2021-9999" });
         advisory.References.Should().Contain(reference => reference.Url == dto.CanonicalUrl && reference.Kind == "details");
         advisory.References.Should().Contain(reference => reference.Url == "https://example.com/details");
         advisory.AffectedPackages.Should().HaveCount(2);