Add LDAP Distinguished Name Helper and Credential Audit Context

- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.

ops/authority/AGENTS.md

@@ -10,7 +10,7 @@ Operate and harden the StellaOps Authority platform in production and air-gapped
 - **Continuity & Security** – Backup/restore guides, key rotation playbooks, revocation propagation.
 
 ## Working Agreements
-- Track work in `ops/authority/TASKS.md` (TODO → DOING → DONE/BLOCKED); keep entries dated.
+- Track work directly in the relevant `docs/implplan/SPRINT_*.md` rows (TODO → DOING → DONE/BLOCKED); keep entries dated.
 - Validate container changes with the CI pipeline (`ops/authority` GitHub workflow) before marking DONE.
 - Update operator documentation in `docs/` together with any behavioural change.
 - Coordinate with Authority Core and Security Guild before altering sensitive defaults (rate limits, crypto providers, revocation jobs).

ops/authority/TASKS.md

@@ -1,5 +0,0 @@
-# Authority DevOps Task Board (UTC 2025-10-10)
-
-| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
-| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
-|----|--------|----------|------------|-------------|---------------|