Add unit tests for AST parsing and security sink detection

- Created `StellaOps.AuditPack.Tests.csproj` for unit testing the AuditPack library.
- Implemented comprehensive unit tests in `index.test.js` for AST parsing, covering various JavaScript and TypeScript constructs including functions, classes, decorators, and JSX.
- Added `sink-detect.test.js` to test security sink detection patterns, validating command injection, SQL injection, file write, deserialization, SSRF, NoSQL injection, and more.
- Included tests for taint source detection in various contexts such as Express, Koa, and AWS Lambda.

src/Cli/__Tests/StellaOps.Cli.Tests/Services/ImageAttestationVerifierTests.cs

@@ -69,9 +69,15 @@ public sealed class ImageAttestationVerifierTests
         public Task<string> ResolveDigestAsync(OciImageReference reference, CancellationToken cancellationToken = default)
             => Task.FromResult(_digest);
 
+        public Task<string> ResolveTagAsync(string registry, string repository, string tag, CancellationToken cancellationToken = default)
+            => Task.FromResult(_digest);
+
         public Task<OciReferrersResponse> ListReferrersAsync(OciImageReference reference, string digest, CancellationToken cancellationToken = default)
             => Task.FromResult(_referrers);
 
+        public Task<IReadOnlyList<OciReferrerDescriptor>> GetReferrersAsync(string registry, string repository, string digest, string? artifactType = null, CancellationToken cancellationToken = default)
+            => Task.FromResult<IReadOnlyList<OciReferrerDescriptor>>(_referrers.Referrers.Select(m => new OciReferrerDescriptor { Digest = m.Digest, ArtifactType = m.ArtifactType }).ToList());
+
         public Task<OciManifest> GetManifestAsync(OciImageReference reference, string digest, CancellationToken cancellationToken = default)
             => Task.FromResult(new OciManifest());