Add integration tests for migration categories and execution

- Implemented MigrationCategoryTests to validate migration categorization for startup, release, seed, and data migrations.
- Added tests for edge cases, including null, empty, and whitespace migration names.
- Created StartupMigrationHostTests to verify the behavior of the migration host with real PostgreSQL instances using Testcontainers.
- Included tests for migration execution, schema creation, and handling of pending release migrations.
- Added SQL migration files for testing: creating a test table, adding a column, a release migration, and seeding data.

src/Cli/StellaOps.Cli/Commands/CommandFactory.cs

@@ -4,6 +4,7 @@ using System.Threading;
 using System.Threading.Tasks;
 using Microsoft.Extensions.Logging;
 using StellaOps.Cli.Configuration;
+using StellaOps.Cli.Extensions;
 using StellaOps.Cli.Plugins;
 using StellaOps.Cli.Services.Models.AdvisoryAi;
 
@@ -5182,13 +5183,13 @@ internal static class CommandFactory
             Description = "Image digests to test (can be specified multiple times).",
             AllowMultipleArgumentsPerToken = true
         };
-        imagesOption.IsRequired = true;
+        imagesOption.Required = true;
 
         var scannerOption = new Option<string>("--scanner", "-s")
         {
             Description = "Scanner container image reference."
         };
-        scannerOption.IsRequired = true;
+        scannerOption.Required = true;
 
         var policyBundleOption = new Option<string?>("--policy-bundle")
         {
@@ -5582,13 +5583,13 @@ internal static class CommandFactory
         {
             Description = "Start timestamp (ISO-8601). Required."
         };
-        fromOption.IsRequired = true;
+        fromOption.Required = true;
 
         var toOption = new Option<DateTimeOffset>("--to")
         {
             Description = "End timestamp (ISO-8601). Required."
         };
-        toOption.IsRequired = true;
+        toOption.Required = true;
 
         var logsTenantOption = new Option<string?>("--tenant", "-t")
         {
@@ -6544,7 +6545,7 @@ internal static class CommandFactory
         var secretsInjectRefOption = new Option<string>("--secret-ref")
         {
             Description = "Secret reference (provider-specific path).",
-            IsRequired = true
+            Required = true
         };
 
         var secretsInjectProviderOption = new Option<string>("--provider")
@@ -6844,19 +6845,18 @@ internal static class CommandFactory
 
             return CommandHandlers.HandleExceptionsListAsync(
                 services,
+                tenant,
                 vuln,
                 scopeType,
                 scopeValue,
                 statuses,
                 owner,
                 effect,
-                expiringDays,
+                expiringDays.HasValue ? DateTimeOffset.UtcNow.AddDays(expiringDays.Value) : null,
                 includeExpired,
                 pageSize,
                 pageToken,
-                tenant,
-                json,
-                csv,
+                json || csv,
                 verbose,
                 cancellationToken);
         });
@@ -6977,7 +6977,8 @@ internal static class CommandFactory
             var effect = parseResult.GetValue(createEffectOption) ?? string.Empty;
             var justification = parseResult.GetValue(createJustificationOption) ?? string.Empty;
             var owner = parseResult.GetValue(createOwnerOption) ?? string.Empty;
-            var expiration = parseResult.GetValue(createExpirationOption);
+            var expirationStr = parseResult.GetValue(createExpirationOption);
+            var expiration = !string.IsNullOrWhiteSpace(expirationStr) && DateTimeOffset.TryParse(expirationStr, out var exp) ? exp : (DateTimeOffset?)null;
             var evidence = parseResult.GetValue(createEvidenceOption) ?? Array.Empty<string>();
             var policy = parseResult.GetValue(createPolicyOption);
             var stage = parseResult.GetValue(createStageOption);
@@ -6987,17 +6988,17 @@ internal static class CommandFactory
 
             return CommandHandlers.HandleExceptionsCreateAsync(
                 services,
+                tenant ?? string.Empty,
                 vuln,
                 scopeType,
                 scopeValue,
                 effect,
                 justification,
-                owner,
+                owner ?? string.Empty,
                 expiration,
                 evidence,
                 policy,
                 stage,
-                tenant,
                 json,
                 verbose,
                 cancellationToken);
@@ -7042,9 +7043,9 @@ internal static class CommandFactory
             return CommandHandlers.HandleExceptionsPromoteAsync(
                 services,
                 exceptionId,
-                target,
-                comment,
                 tenant,
+                target ?? "active",
+                comment,
                 json,
                 verbose,
                 cancellationToken);
@@ -7128,10 +7129,10 @@ internal static class CommandFactory
 
             return CommandHandlers.HandleExceptionsImportAsync(
                 services,
+                tenant ?? string.Empty,
                 file,
                 stage,
                 source,
-                tenant,
                 json,
                 verbose,
                 cancellationToken);
@@ -7184,11 +7185,13 @@ internal static class CommandFactory
 
             return CommandHandlers.HandleExceptionsExportAsync(
                 services,
-                output,
+                tenant,
                 statuses,
                 format,
+                output,
+                false, // includeManifest
                 signed,
-                tenant,
+                false, // json output
                 verbose,
                 cancellationToken);
         });
@@ -7470,13 +7473,13 @@ internal static class CommandFactory
         var backfillFromOption = new Option<DateTimeOffset>("--from")
         {
             Description = "Start date/time for backfill (ISO 8601 format).",
-            IsRequired = true
+            Required = true
         };
 
         var backfillToOption = new Option<DateTimeOffset>("--to")
         {
             Description = "End date/time for backfill (ISO 8601 format).",
-            IsRequired = true
+            Required = true
         };
 
         var backfillDryRunOption = new Option<bool>("--dry-run")
@@ -7732,19 +7735,19 @@ internal static class CommandFactory
         var quotaSetTenantOption = new Option<string>("--tenant")
         {
             Description = "Tenant ID.",
-            IsRequired = true
+            Required = true
         };
 
         var quotaSetResourceTypeOption = new Option<string>("--resource-type")
         {
             Description = "Resource type (api_calls, data_ingested_bytes, items_processed, backfills, concurrent_jobs, storage_bytes).",
-            IsRequired = true
+            Required = true
         };
 
         var quotaSetLimitOption = new Option<long>("--limit")
         {
             Description = "Quota limit value.",
-            IsRequired = true
+            Required = true
         };
 
         var quotaSetPeriodOption = new Option<string>("--period")
@@ -7800,13 +7803,13 @@ internal static class CommandFactory
         var quotaResetTenantOption = new Option<string>("--tenant")
         {
             Description = "Tenant ID.",
-            IsRequired = true
+            Required = true
         };
 
         var quotaResetResourceTypeOption = new Option<string>("--resource-type")
         {
             Description = "Resource type to reset.",
-            IsRequired = true
+            Required = true
         };
 
         var quotaResetReasonOption = new Option<string?>("--reason")
@@ -9547,7 +9550,7 @@ internal static class CommandFactory
         var outputOption = new Option<string>("--output", "-o")
         {
             Description = "Output path for the downloaded spec (file or directory).",
-            IsRequired = true
+            Required = true
         };
 
         var serviceOption = new Option<string?>("--service", "-s")