Add LDAP Distinguished Name Helper and Credential Audit Context

- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.

src/AdvisoryAI/StellaOps.AdvisoryAI/Orchestration/AdvisoryPipelineOrchestrator.cs

@@ -5,10 +5,11 @@ using System.Linq;
 using System.Security.Cryptography;
 using System.Text;
 using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.AdvisoryAI.Abstractions;
-using StellaOps.AdvisoryAI.Context;
-using StellaOps.AdvisoryAI.Tools;
+using Microsoft.Extensions.Options;
+using StellaOps.AdvisoryAI.Abstractions;
+using StellaOps.AdvisoryAI.Context;
+using StellaOps.AdvisoryAI.Documents;
+using StellaOps.AdvisoryAI.Tools;
 
 namespace StellaOps.AdvisoryAI.Orchestration;
 
@@ -49,24 +50,25 @@ internal sealed class AdvisoryPipelineOrchestrator : IAdvisoryPipelineOrchestrat
             request.PreferredSections,
             config.StructuredMaxChunks);
 
-        var structured = await _structuredRetriever
-            .RetrieveAsync(structuredRequest, cancellationToken)
-            .ConfigureAwait(false);
-
-        var vectorResults = await RetrieveVectorMatchesAsync(request, structuredRequest, config, cancellationToken).ConfigureAwait(false);
-        var (sbomContext, dependencyAnalysis) = await RetrieveSbomContextAsync(request, config, cancellationToken).ConfigureAwait(false);
+        var structured = await _structuredRetriever
+            .RetrieveAsync(structuredRequest, cancellationToken)
+            .ConfigureAwait(false);
+
+        var structuredChunks = NormalizeStructuredChunks(structured);
+        var vectorResults = await RetrieveVectorMatchesAsync(request, structuredRequest, config, cancellationToken).ConfigureAwait(false);
+        var (sbomContext, dependencyAnalysis) = await RetrieveSbomContextAsync(request, config, cancellationToken).ConfigureAwait(false);
 
         var metadata = BuildMetadata(request, structured, vectorResults, sbomContext, dependencyAnalysis);
         var cacheKey = ComputeCacheKey(request, structured, vectorResults, sbomContext, dependencyAnalysis);
 
-        var plan = new AdvisoryTaskPlan(
-            request,
-            cacheKey,
-            config.PromptTemplate,
-            structured.Chunks.ToImmutableArray(),
-            vectorResults,
-            sbomContext,
-            dependencyAnalysis,
+        var plan = new AdvisoryTaskPlan(
+            request,
+            cacheKey,
+            config.PromptTemplate,
+            structuredChunks,
+            vectorResults,
+            sbomContext,
+            dependencyAnalysis,
             config.Budget,
             metadata);
 
@@ -88,13 +90,18 @@ internal sealed class AdvisoryPipelineOrchestrator : IAdvisoryPipelineOrchestrat
         foreach (var query in configuration.GetVectorQueries())
         {
             var vectorRequest = new VectorRetrievalRequest(structuredRequest, query, configuration.VectorTopK);
-            var matches = await _vectorRetriever
-                .SearchAsync(vectorRequest, cancellationToken)
-                .ConfigureAwait(false);
-
-            builder.Add(new AdvisoryVectorResult(query, matches.ToImmutableArray()));
-        }
-
+            var matches = await _vectorRetriever
+                .SearchAsync(vectorRequest, cancellationToken)
+                .ConfigureAwait(false);
+            var orderedMatches = matches
+                .OrderBy(match => match.ChunkId, StringComparer.Ordinal)
+                .ThenByDescending(match => match.Score)
+                .ThenBy(match => match.DocumentId, StringComparer.Ordinal)
+                .ToImmutableArray();
+
+            builder.Add(new AdvisoryVectorResult(query, orderedMatches));
+        }
+
         return builder.MoveToImmutable();
     }
 
@@ -228,7 +235,20 @@ internal sealed class AdvisoryPipelineOrchestrator : IAdvisoryPipelineOrchestrat
             context.Metadata);
     }
 
-    private static string ComputeCacheKey(
+    private static ImmutableArray<AdvisoryChunk> NormalizeStructuredChunks(AdvisoryRetrievalResult structured)
+    {
+        if (structured.Chunks.Count == 0)
+        {
+            return ImmutableArray<AdvisoryChunk>.Empty;
+        }
+
+        return structured.Chunks
+            .OrderBy(chunk => chunk.DocumentId, StringComparer.Ordinal)
+            .ThenBy(chunk => chunk.ChunkId, StringComparer.Ordinal)
+            .ToImmutableArray();
+    }
+
+    private static string ComputeCacheKey(
         AdvisoryTaskRequest request,
         AdvisoryRetrievalResult structured,
         ImmutableArray<AdvisoryVectorResult> vectors,