feat: Implement Runtime Facts ingestion service and NDJSON reader

- Added RuntimeFactsNdjsonReader for reading NDJSON formatted runtime facts.
- Introduced IRuntimeFactsIngestionService interface and its implementation.
- Enhanced Program.cs to register new services and endpoints for runtime facts.
- Updated CallgraphIngestionService to include CAS URI in stored artifacts.
- Created RuntimeFactsValidationException for validation errors during ingestion.
- Added tests for RuntimeFactsIngestionService and RuntimeFactsNdjsonReader.
- Implemented SignalsSealedModeMonitor for compliance checks in sealed mode.
- Updated project dependencies for testing utilities.

src/Cli/__Tests/StellaOps.Cli.Tests/Commands/CommandFactoryTests.cs

@@ -0,0 +1,36 @@
+using System;
+using System.CommandLine;
+using System.Linq;
+using System.Threading;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using StellaOps.Cli.Commands;
+using StellaOps.Cli.Configuration;
+
+namespace StellaOps.Cli.Tests.Commands;
+
+public sealed class CommandFactoryTests
+{
+    [Fact]
+    public void Create_RegistersRubyInspectAndResolveCommands()
+    {
+        using var loggerFactory = LoggerFactory.Create(builder => builder.SetMinimumLevel(LogLevel.Critical));
+        var services = new ServiceCollection().BuildServiceProvider();
+        var root = CommandFactory.Create(services, new StellaOpsCliOptions(), CancellationToken.None, loggerFactory);
+
+        var ruby = Assert.Single(root.Subcommands, command => string.Equals(command.Name, "ruby", StringComparison.Ordinal));
+
+        var inspect = Assert.Single(ruby.Subcommands, command => string.Equals(command.Name, "inspect", StringComparison.Ordinal));
+        var inspectOptions = inspect.Children.OfType<Option>().ToArray();
+        var inspectAliases = inspectOptions.SelectMany(option => option.Aliases).ToArray();
+        Assert.Contains("--root", inspectAliases, StringComparer.Ordinal);
+        Assert.Contains("--format", inspectAliases, StringComparer.Ordinal);
+
+        var resolve = Assert.Single(ruby.Subcommands, command => string.Equals(command.Name, "resolve", StringComparison.Ordinal));
+        var resolveOptions = resolve.Children.OfType<Option>().ToArray();
+        var resolveAliases = resolveOptions.SelectMany(option => option.Aliases).ToArray();
+        Assert.Contains("--image", resolveAliases, StringComparer.Ordinal);
+        Assert.Contains("--scan-id", resolveAliases, StringComparer.Ordinal);
+        Assert.Contains("--format", resolveAliases, StringComparer.Ordinal);
+    }
+}