Add call graph fixtures for various languages and scenarios

- Introduced `all-edge-reasons.json` to test edge resolution reasons in .NET.
- Added `all-visibility-levels.json` to validate method visibility levels in .NET.
- Created `dotnet-aspnetcore-minimal.json` for a minimal ASP.NET Core application.
- Included `go-gin-api.json` for a Go Gin API application structure.
- Added `java-spring-boot.json` for the Spring PetClinic application in Java.
- Introduced `legacy-no-schema.json` for legacy application structure without schema.
- Created `node-express-api.json` for an Express.js API application structure.

docs/db/SPECIFICATION.md

@@ -2,7 +2,7 @@
 
 **Version:** 1.0.0
 **Status:** DRAFT
-**Last Updated:** 2025-11-28
+**Last Updated:** 2025-12-15
 
 ---
 
@@ -446,6 +446,17 @@ CREATE TABLE authority.license_usage (
     UNIQUE (license_id, scanner_node_id)
 );
 
+-- Offline Kit audit (SPRINT_0341_0001_0001)
+CREATE TABLE authority.offline_kit_audit (
+    event_id UUID PRIMARY KEY,
+    tenant_id TEXT NOT NULL,
+    event_type TEXT NOT NULL,
+    timestamp TIMESTAMPTZ NOT NULL,
+    actor TEXT NOT NULL,
+    details JSONB NOT NULL,
+    result TEXT NOT NULL
+);
+
 -- Indexes
 CREATE INDEX idx_users_tenant ON authority.users(tenant_id);
 CREATE INDEX idx_users_email ON authority.users(email) WHERE email IS NOT NULL;
@@ -456,6 +467,10 @@ CREATE INDEX idx_tokens_expires ON authority.tokens(expires_at) WHERE revoked_at
 CREATE INDEX idx_tokens_hash ON authority.tokens(token_hash);
 CREATE INDEX idx_login_attempts_tenant_time ON authority.login_attempts(tenant_id, attempted_at DESC);
 CREATE INDEX idx_licenses_tenant ON authority.licenses(tenant_id);
+CREATE INDEX idx_offline_kit_audit_ts ON authority.offline_kit_audit(timestamp DESC);
+CREATE INDEX idx_offline_kit_audit_type ON authority.offline_kit_audit(event_type);
+CREATE INDEX idx_offline_kit_audit_tenant_ts ON authority.offline_kit_audit(tenant_id, timestamp DESC);
+CREATE INDEX idx_offline_kit_audit_result ON authority.offline_kit_audit(tenant_id, result, timestamp DESC);
 ```
 
 ### 5.2 Vulnerability Schema (vuln)
@@ -1222,6 +1237,7 @@ Every connection must configure:
 ```sql
 -- Set on connection open (via DataSource)
 SET app.tenant_id = '<tenant-uuid>';
+SET app.current_tenant = '<tenant-uuid>'; -- compatibility (legacy)
 SET timezone = 'UTC';
 SET statement_timeout = '30s';  -- Adjust per use case
 ```