feat: Initialize Zastava Webhook service with TLS and Authority authentication

- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.

docs/notify/samples/notify-channel@1.sample.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "notify.channel@1",
+  "channelId": "channel-slack-sec-ops",
+  "tenantId": "tenant-01",
+  "name": "slack:sec-ops",
+  "type": "slack",
+  "displayName": "SecOps Slack",
+  "description": "Primary incident response channel.",
+  "config": {
+    "secretRef": "ref://notify/channels/slack/sec-ops",
+    "target": "#sec-ops",
+    "properties": {
+      "workspace": "stellaops-sec"
+    },
+    "limits": {
+      "concurrency": 2,
+      "requestsPerMinute": 60,
+      "timeout": "PT10S"
+    }
+  },
+  "enabled": true,
+  "labels": {
+    "team": "secops"
+  },
+  "metadata": {
+    "createdByTask": "NOTIFY-MODELS-15-102"
+  },
+  "createdBy": "ops:amir",
+  "createdAt": "2025-10-18T17:02:11+00:00",
+  "updatedBy": "ops:amir",
+  "updatedAt": "2025-10-18T17:45:00+00:00"
+}