feat: Implement IsolatedReplayContext for deterministic audit replay

- Added IsolatedReplayContext class to provide an isolated environment for replaying audit bundles without external calls.
- Introduced methods for initializing the context, verifying input digests, and extracting inputs for policy evaluation.
- Created supporting interfaces and options for context configuration.

feat: Create ReplayExecutor for executing policy re-evaluation and verdict comparison

- Developed ReplayExecutor class to handle the execution of replay processes, including input verification and verdict comparison.
- Implemented detailed drift detection and error handling during replay execution.
- Added interfaces for policy evaluation and replay execution options.

feat: Add ScanSnapshotFetcher for fetching scan data and snapshots

- Introduced ScanSnapshotFetcher class to retrieve necessary scan data and snapshots for audit bundle creation.
- Implemented methods to fetch scan metadata, advisory feeds, policy snapshots, and VEX statements.
- Created supporting interfaces for scan data, feed snapshots, and policy snapshots.

src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/OciArtifactPusher.cs

@@ -127,7 +127,7 @@ public sealed class OciArtifactPusher
 
         return new OciArtifactManifest
         {
-            MediaType = OciMediaTypes.ArtifactManifest,
+            MediaType = OciMediaTypes.ImageManifest,
             ArtifactType = request.ArtifactType,
             Config = new OciDescriptor
             {
@@ -140,7 +140,7 @@ public sealed class OciArtifactPusher
                 ? null
                 : new OciDescriptor
                 {
-                    MediaType = OciMediaTypes.ArtifactManifest,
+                    MediaType = OciMediaTypes.ImageManifest,
                     Digest = request.SubjectDigest!,
                     Size = 0
                 },
@@ -220,7 +220,7 @@ public sealed class OciArtifactPusher
             Content = new ByteArrayContent(manifestBytes)
         };
 
-        request.Content.Headers.ContentType = new MediaTypeHeaderValue(OciMediaTypes.ArtifactManifest);
+        request.Content.Headers.ContentType = new MediaTypeHeaderValue(OciMediaTypes.ImageManifest);
         auth.ApplyTo(request);
 
         using var response = await _httpClient.SendAsync(request, cancellationToken).ConfigureAwait(false);