Add LDAP Distinguished Name Helper and Credential Audit Context

- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.

src/__Libraries/StellaOps.Cryptography.DependencyInjection/CryptoServiceCollectionExtensions.cs

@@ -1,9 +1,12 @@
 using System;
 using System.Collections.Generic;
+using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using Microsoft.Extensions.Options;
 using StellaOps.Cryptography;
+using StellaOps.Cryptography.Plugin.CryptoPro;
+using StellaOps.Cryptography.Plugin.Pkcs11Gost;
 
 namespace StellaOps.Cryptography.DependencyInjection;
 
@@ -57,4 +60,53 @@ public static class CryptoServiceCollectionExtensions
 
         return services;
     }
+
+    public static IServiceCollection AddStellaOpsCryptoRu(
+        this IServiceCollection services,
+        IConfiguration configuration,
+        Action<CryptoProviderRegistryOptions>? configureRegistry = null)
+    {
+        ArgumentNullException.ThrowIfNull(services);
+        ArgumentNullException.ThrowIfNull(configuration);
+
+        var baseSection = configuration.GetSection("StellaOps:Crypto");
+        services.Configure<StellaOpsCryptoOptions>(baseSection);
+        services.Configure<CryptoProviderRegistryOptions>(baseSection.GetSection("Registry"));
+        services.Configure<CryptoProGostProviderOptions>(baseSection.GetSection("CryptoPro"));
+        services.Configure<Pkcs11GostProviderOptions>(baseSection.GetSection("Pkcs11"));
+
+        services.AddStellaOpsCrypto(configureRegistry);
+        services.AddCryptoProGostProvider();
+        services.AddPkcs11GostProvider();
+
+        services.PostConfigure<CryptoProviderRegistryOptions>(options =>
+        {
+            EnsurePreferred(options.PreferredProviders);
+            foreach (var profile in options.Profiles.Values)
+            {
+                EnsurePreferred(profile.PreferredProviders);
+            }
+        });
+
+        return services;
+
+        static void EnsurePreferred(IList<string> providers)
+        {
+            InsertIfMissing(providers, "ru.pkcs11");
+            InsertIfMissing(providers, "ru.cryptopro.csp");
+        }
+
+        static void InsertIfMissing(IList<string> providers, string name)
+        {
+            for (var i = 0; i < providers.Count; i++)
+            {
+                if (string.Equals(providers[i], name, StringComparison.OrdinalIgnoreCase))
+                {
+                    return;
+                }
+            }
+
+            providers.Insert(0, name);
+        }
+    }
 }