feat: Implement Runtime Facts ingestion service and NDJSON reader

- Added RuntimeFactsNdjsonReader for reading NDJSON formatted runtime facts.
- Introduced IRuntimeFactsIngestionService interface and its implementation.
- Enhanced Program.cs to register new services and endpoints for runtime facts.
- Updated CallgraphIngestionService to include CAS URI in stored artifacts.
- Created RuntimeFactsValidationException for validation errors during ingestion.
- Added tests for RuntimeFactsIngestionService and RuntimeFactsNdjsonReader.
- Implemented SignalsSealedModeMonitor for compliance checks in sealed mode.
- Updated project dependencies for testing utilities.

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang/Core/LanguageAnalyzerContext.cs

@@ -1,3 +1,4 @@
+using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.Secrets;
 
@@ -7,12 +8,17 @@ public sealed class LanguageAnalyzerContext
 {
     private const string SecretsComponentName = "ScannerWorkerLanguageAnalyzers";
 
-    public LanguageAnalyzerContext(string rootPath, TimeProvider timeProvider, LanguageUsageHints? usageHints = null, IServiceProvider? services = null)
+    public LanguageAnalyzerContext(
+        string rootPath,
+        TimeProvider timeProvider,
+        LanguageUsageHints? usageHints = null,
+        IServiceProvider? services = null,
+        ScanAnalysisStore? analysisStore = null)
     {
-        if (string.IsNullOrWhiteSpace(rootPath))
-        {
-            throw new ArgumentException("Root path is required", nameof(rootPath));
-        }
+        if (string.IsNullOrWhiteSpace(rootPath))
+        {
+            throw new ArgumentException("Root path is required", nameof(rootPath));
+        }
 
         RootPath = Path.GetFullPath(rootPath);
         if (!Directory.Exists(RootPath))
@@ -24,6 +30,7 @@ public sealed class LanguageAnalyzerContext
         UsageHints = usageHints ?? LanguageUsageHints.Empty;
         Services = services;
         Secrets = CreateSecrets(services);
+        AnalysisStore = analysisStore;
     }
 
     public string RootPath { get; }
@@ -36,6 +43,8 @@ public sealed class LanguageAnalyzerContext
 
     public LanguageAnalyzerSecrets Secrets { get; }
 
+    public ScanAnalysisStore? AnalysisStore { get; }
+
     public bool TryGetService<T>([NotNullWhen(true)] out T? service) where T : class
     {
         if (Services is null)