Add tests and implement StubBearer authentication for Signer endpoints

- Created SignerEndpointsTests to validate the SignDsse and VerifyReferrers endpoints.
- Implemented StubBearerAuthenticationDefaults and StubBearerAuthenticationHandler for token-based authentication.
- Developed ConcelierExporterClient for managing Trivy DB settings and export operations.
- Added TrivyDbSettingsPageComponent for UI interactions with Trivy DB settings, including form handling and export triggering.
- Implemented styles and HTML structure for Trivy DB settings page.
- Created NotifySmokeCheck tool for validating Redis event streams and Notify deliveries.

src/StellaOps.Scanner.WebService/Options/ScannerWebServiceOptions.cs

@@ -55,15 +55,20 @@ public sealed class ScannerWebServiceOptions
     /// </summary>
     public SigningOptions Signing { get; set; } = new();
 
-    /// <summary>
-    /// API-specific settings such as base path.
-    /// </summary>
-    public ApiOptions Api { get; set; } = new();
-
-    /// <summary>
-    /// Platform event emission settings.
-    /// </summary>
-    public EventsOptions Events { get; set; } = new();
+    /// <summary>
+    /// API-specific settings such as base path.
+    /// </summary>
+    public ApiOptions Api { get; set; } = new();
+
+    /// <summary>
+    /// Platform event emission settings.
+    /// </summary>
+    public EventsOptions Events { get; set; } = new();
+
+    /// <summary>
+    /// Runtime ingestion configuration.
+    /// </summary>
+    public RuntimeOptions Runtime { get; set; } = new();
 
     public sealed class StorageOptions
     {
@@ -236,20 +241,22 @@ public sealed class ScannerWebServiceOptions
         public int EnvelopeTtlSeconds { get; set; } = 600;
     }
 
-    public sealed class ApiOptions
-    {
-        public string BasePath { get; set; } = "/api/v1";
-
-        public string ScansSegment { get; set; } = "scans";
-
-        public string ReportsSegment { get; set; } = "reports";
-
-        public string PolicySegment { get; set; } = "policy";
-    }
-
-    public sealed class EventsOptions
-    {
-        public bool Enabled { get; set; }
+    public sealed class ApiOptions
+    {
+        public string BasePath { get; set; } = "/api/v1";
+
+        public string ScansSegment { get; set; } = "scans";
+
+        public string ReportsSegment { get; set; } = "reports";
+
+        public string PolicySegment { get; set; } = "policy";
+
+        public string RuntimeSegment { get; set; } = "runtime";
+    }
+
+    public sealed class EventsOptions
+    {
+        public bool Enabled { get; set; }
 
         public string Driver { get; set; } = "redis";
 
@@ -257,10 +264,29 @@ public sealed class ScannerWebServiceOptions
 
         public string Stream { get; set; } = "stella.events";
 
-        public double PublishTimeoutSeconds { get; set; } = 5;
-
-        public long MaxStreamLength { get; set; } = 10000;
-
-        public IDictionary<string, string> DriverSettings { get; set; } = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
-    }
-}
+        public double PublishTimeoutSeconds { get; set; } = 5;
+
+        public long MaxStreamLength { get; set; } = 10000;
+
+        public IDictionary<string, string> DriverSettings { get; set; } = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
+    }
+
+    public sealed class RuntimeOptions
+    {
+        public int MaxBatchSize { get; set; } = 256;
+
+        public int MaxPayloadBytes { get; set; } = 1 * 1024 * 1024;
+
+        public int EventTtlDays { get; set; } = 45;
+
+        public double PerNodeEventsPerSecond { get; set; } = 50;
+
+        public int PerNodeBurst { get; set; } = 200;
+
+        public double PerTenantEventsPerSecond { get; set; } = 200;
+
+        public int PerTenantBurst { get; set; } = 1000;
+
+        public int PolicyCacheTtlSeconds { get; set; } = 300;
+    }
+}