feat: Initialize Zastava Webhook service with TLS and Authority authentication

- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.

samples/runtime/README.md

@@ -0,0 +1,6 @@
+# Runtime Fixtures
+
+Supporting filesystem snippets consumed by analyzer microbenchmarks and integration tests. They are intentionally lightweight yet deterministic so they can be committed to the repository without bloating history.
+
+- `npm-monorepo/` – trimmed `node_modules/` tree for workspace-style Node.js projects.
+- `python-venv/` – selected `site-packages/` entries highlighting `*.dist-info` metadata.

samples/runtime/npm-monorepo/README.md

@@ -0,0 +1,9 @@
+# NPM Monorepo Fixture
+
+This fixture represents a trimmed monorepo layout used by the analyzer microbench. It contains four packages under `node_modules/` with realistic metadata and dependency edges.
+
+- `@stella/core` depends on `lodash`.
+- `@stella/web` depends on `@stella/core` and `rxjs`.
+- Third-party packages expose standard `name`, `version`, and `license` fields.
+
+The files are intentionally small so that the bench harness focuses on directory traversal and metadata parsing overhead.

samples/runtime/npm-monorepo/node_modules/@stella/core/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@stella/core",
+  "version": "2.0.0",
+  "description": "Core services shared by the sample monorepo.",
+  "dependencies": {
+    "lodash": "4.17.21"
+  },
+  "license": "Apache-2.0"
+}

samples/runtime/npm-monorepo/node_modules/@stella/web/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@stella/web",
+  "version": "1.5.3",
+  "description": "Web layer in the sample monorepo.",
+  "dependencies": {
+    "@stella/core": "2.0.0",
+    "rxjs": "7.8.1"
+  },
+  "license": "MIT"
+}

samples/runtime/npm-monorepo/node_modules/lodash/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "lodash",
+  "version": "4.17.21",
+  "description": "Lodash modular utilities.",
+  "license": "MIT"
+}

samples/runtime/npm-monorepo/node_modules/rxjs/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "rxjs",
+  "version": "7.8.1",
+  "description": "Reactive Extensions for modern JavaScript.",
+  "license": "Apache-2.0"
+}

samples/runtime/python-venv/README.md

@@ -0,0 +1,5 @@
+# Python Virtual Environment Fixture
+
+The fixture mimics a trimmed `site-packages/` layout with three common dependencies (`requests`, `urllib3`, `certifi`). Each package exposes a `*.dist-info/METADATA` file so the analyzer bench can validate parsing performance and header extraction.
+
+Files intentionally omit wheels and bytecode to keep the tree compact while still realistic.

samples/runtime/python-venv/lib/python3.11/site-packages/certifi-2024.6.2.dist-info/METADATA

@@ -0,0 +1,5 @@
+Metadata-Version: 2.1
+Name: certifi
+Version: 2024.6.2
+Summary: Mozilla SSL Certificates.
+License: MPL-2.0

samples/runtime/python-venv/lib/python3.11/site-packages/requests-2.32.0.dist-info/METADATA

@@ -0,0 +1,7 @@
+Metadata-Version: 2.1
+Name: requests
+Version: 2.32.0
+Summary: Python HTTP for Humans.
+License: Apache-2.0
+Requires-Dist: urllib3 (>=1.21.1,<3)
+Requires-Dist: certifi (>=2017.4.17)

samples/runtime/python-venv/lib/python3.11/site-packages/urllib3-2.2.1.dist-info/METADATA

@@ -0,0 +1,5 @@
+Metadata-Version: 2.1
+Name: urllib3
+Version: 2.2.1
+Summary: HTTP library with thread-safe connection pooling.
+License: MIT