feat: Add initial implementation of Vulnerability Resolver Jobs

- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.

docs/provenance/inline-dsse.md

@@ -88,6 +88,45 @@ Reference helper: `src/__Libraries/StellaOps.Provenance.Mongo/ProvenanceMongoExt
 
 ---
 
+### 2.2 Advisory AI structured chunk schema (GHSA/Cisco parity)
+
+Advisory AI consumes the canonical `Advisory` aggregate and emits structured chunks that mirror GHSA GraphQL and Cisco PSIRT provenance anchors. The response contract is:
+
+```jsonc
+{
+  "advisoryKey": "CVE-2025-0001",
+  "fingerprint": "<sha256 of canonical advisory>",
+  "total": 3,
+  "truncated": false,
+  "entries": [
+    {
+      "type": "workaround",                // sorted by (type, observationPath, documentId)
+      "chunkId": "c0ffee12",              // sha256(advisory.observationId + observationPath)[:16]
+      "content": { /* structured field */ },
+      "provenance": {
+        "documentId": "tenant-a:chunk:newest", // Mongo _id of backing observation
+        "observationPath": "/references/0",    // JSON Pointer into the observation
+        "source": "nvd",
+        "kind": "workaround",
+        "value": "tenant-a:chunk:newest",
+        "recordedAt": "2025-01-07T00:00:00Z",
+        "fieldMask": ["/references/0"]
+      }
+    }
+  ]
+}
+```
+
+Determinism requirements:
+
+- Order entries by `(type, observationPath, documentId)` to keep cache keys stable across nodes.
+- Always include the advisory `fingerprint` in cache keys and responses.
+- Preserve observation-level provenance by emitting both `documentId` and `observationPath` under `provenance`.
+
+These anchors let Attestor/Console deep-link evidence and allow offline mirrors to prove origin without merging transforms.
+
+---
+
 ## 3. CI/CD snippet
 
 See `scripts/publish_attestation_with_provenance.sh`: