refactor: DB schema fixes + container renames + compose include + audit sprint

- FindingsLedger: change schema from public to findings (V3-01)
- Add 9 migration module plugins: RiskEngine, Replay, ExportCenter, Integrations, Signer, IssuerDirectory, Workflow, PacksRegistry, OpsMemory (V4-01 to V4-09)
- Remove 16 redundant inline CREATE SCHEMA patterns (V4-10)
- Rename export→export-web, excititor→excititor-web for consistency
- Compose stella-ops.yml: thin wrapper using include: directive
- Fix dead /api/v1/jobengine/* gateway routes → release-orchestrator/packsregistry
- Scheduler plugin architecture: ISchedulerJobPlugin + ScanJobPlugin + DoctorJobPlugin
- Create unified audit sink sprint plan
- VulnExplorer integration tests + gap analysis

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs/modules/airgap/guides/VEX_SIGNATURE_VERIFICATION_OFFLINE_MODE.md

@@ -301,7 +301,7 @@ sudo stellaops-cli bundle verify /tmp/new-bundle/manifest.json
 
 # Apply with verification
 sudo stellaops-cli bundle apply /tmp/new-bundle --verify
-sudo systemctl restart stellaops-excititor
+sudo systemctl restart stellaops-excititor-web
 
 # Rollback if needed
 # sudo stellaops-cli bundle rollback --to bundles.backup-20250115

docs/modules/vex-lens/operations/offline-kit.md

@@ -19,7 +19,7 @@ VexLens can operate in fully air-gapped environments with pre-loaded VEX data an
   "bundleId": "vexlens-bundle-2025-12-06",
   "version": "1.0.0",
   "createdAt": "2025-12-06T00:00:00Z",
-  "createdBy": "stellaops-export",
+  "createdBy": "stellaops-export-web",
   "checksum": "sha256:abc123...",
   "components": {
     "issuerDirectory": {