Add new features and tests for AirGap and Time modules

- Introduced `SbomService` tasks documentation.
- Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`.
- Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace.
- Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories.
- Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests.
- Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace.
- Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.

docs/modules/orchestrator/prep/2025-11-20-svc-41-101-prep.md

@@ -0,0 +1,17 @@
+# Orchestrator Pack-Run Prep — PREP-ORCH-SVC-41-101 / 42-101 / TEN-48-001
+
+Status: Draft (2025-11-20)
+Owners: Orchestrator Service Guild
+
+## 41-101 needs
+- Envelope + DAL from 38-101 to register pack runs.
+- Storage schema for pack-run records.
+
+## 42-101 needs
+- Stream contract from 41-101 (pack-run plumbing) to drive streaming.
+
+## TEN-48-001 needs
+- Tenant context plumbing for job DAL/routes.
+
+## Handoff
+Use as prep artefact; update when 38-101 envelope lands and DAL schema is fixed.