Add call graph fixtures for various languages and scenarios

- Introduced `all-edge-reasons.json` to test edge resolution reasons in .NET.
- Added `all-visibility-levels.json` to validate method visibility levels in .NET.
- Created `dotnet-aspnetcore-minimal.json` for a minimal ASP.NET Core application.
- Included `go-gin-api.json` for a Go Gin API application structure.
- Added `java-spring-boot.json` for the Spring PetClinic application in Java.
- Introduced `legacy-no-schema.json` for legacy application structure without schema.
- Created `node-express-api.json` for an Express.js API application structure.

src/Scanner/StellaOps.Scanner.WebService/Program.cs

@@ -21,7 +21,9 @@ using StellaOps.Cryptography.Plugin.BouncyCastle;
 using StellaOps.Concelier.Core.Linksets;
 using StellaOps.Policy;
 using StellaOps.Scanner.Cache;
+using StellaOps.Scanner.Core.Configuration;
 using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Core.TrustAnchors;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.FS;
 using StellaOps.Scanner.Surface.Secrets;
@@ -71,6 +73,13 @@ builder.Services.AddOptions<ScannerWebServiceOptions>()
     })
     .ValidateOnStart();
 
+builder.Services.AddSingleton<IValidateOptions<OfflineKitOptions>, OfflineKitOptionsValidator>();
+builder.Services.AddOptions<OfflineKitOptions>()
+    .Bind(builder.Configuration.GetSection(OfflineKitOptions.SectionName))
+    .ValidateOnStart();
+builder.Services.AddSingleton<IPublicKeyLoader, FileSystemPublicKeyLoader>();
+builder.Services.AddSingleton<ITrustAnchorRegistry, TrustAnchorRegistry>();
+
 builder.Host.UseSerilog((context, services, loggerConfiguration) =>
 {
     loggerConfiguration

src/Scanner/StellaOps.Scanner.WebService/TASKS.md

@@ -4,3 +4,4 @@
 | --- | --- | --- | --- |
 | `SCAN-API-3101-001` | `docs/implplan/SPRINT_3101_0001_0001_scanner_api_standardization.md` | DOING | Align Scanner OpenAPI spec with current endpoints and include ProofSpine routes; compose into `src/Api/StellaOps.Api.OpenApi/stella.yaml`. |
 | `PROOFSPINE-3100-API` | `docs/implplan/SPRINT_3100_0001_0001_proof_spine_system.md` | DOING | Implement and test `/api/v1/spines/*` endpoints and wire verification output. |
+| `SCAN-AIRGAP-0340-001` | `docs/implplan/SPRINT_0340_0001_0001_scanner_offline_config.md` | BLOCKED | Offline kit verification wiring is blocked on an import pipeline + offline Rekor verifier. |