feat: Add initial implementation of Vulnerability Resolver Jobs

- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.

src/Concelier/StellaOps.Concelier.WebService/Contracts/AdvisoryChunkResponses.cs

@@ -5,14 +5,13 @@ namespace StellaOps.Concelier.WebService.Contracts;
 
 public sealed record AdvisoryStructuredFieldResponse(
     string AdvisoryKey,
+    string Fingerprint,
     int Total,
     bool Truncated,
     IReadOnlyList<AdvisoryStructuredFieldEntry> Entries);
 
 public sealed record AdvisoryStructuredFieldEntry(
     string Type,
-    string DocumentId,
-    string FieldPath,
     string ChunkId,
     AdvisoryStructuredFieldContent Content,
     AdvisoryStructuredFieldProvenance Provenance);
@@ -65,6 +64,8 @@ public sealed record AdvisoryStructuredAffectedContent(
     string? Status);
 
 public sealed record AdvisoryStructuredFieldProvenance(
+    string DocumentId,
+    string ObservationPath,
     string Source,
     string Kind,
     string? Value,

src/Concelier/StellaOps.Concelier.WebService/Contracts/AdvisoryObservationContracts.cs

@@ -1,16 +1,19 @@
 using System.Collections.Immutable;
-using StellaOps.Concelier.Models.Observations;
+using StellaOps.Concelier.Models.Observations;
+using StellaOps.Concelier.RawModels;
 
 namespace StellaOps.Concelier.WebService.Contracts;
 
-public sealed record AdvisoryObservationQueryResponse(
-    ImmutableArray<AdvisoryObservation> Observations,
-    AdvisoryObservationLinksetAggregateResponse Linkset,
-    string? NextCursor,
-    bool HasMore);
-
-public sealed record AdvisoryObservationLinksetAggregateResponse(
-    ImmutableArray<string> Aliases,
-    ImmutableArray<string> Purls,
-    ImmutableArray<string> Cpes,
-    ImmutableArray<AdvisoryObservationReference> References);
+public sealed record AdvisoryObservationQueryResponse(
+    ImmutableArray<AdvisoryObservation> Observations,
+    AdvisoryObservationLinksetAggregateResponse Linkset,
+    string? NextCursor,
+    bool HasMore);
+
+public sealed record AdvisoryObservationLinksetAggregateResponse(
+    ImmutableArray<string> Aliases,
+    ImmutableArray<string> Purls,
+    ImmutableArray<string> Cpes,
+    ImmutableArray<AdvisoryObservationReference> References,
+    ImmutableArray<string> Scopes,
+    ImmutableArray<RawRelationship> Relationships);

src/Concelier/StellaOps.Concelier.WebService/Contracts/AdvisoryRawContracts.cs

@@ -45,18 +45,26 @@ public sealed record AdvisoryIdentifiersRequest(
     [property: JsonPropertyName("primary")] string Primary,
     [property: JsonPropertyName("aliases")] IReadOnlyList<string>? Aliases);
 
-public sealed record AdvisoryLinksetRequest(
-    [property: JsonPropertyName("aliases")] IReadOnlyList<string>? Aliases,
-    [property: JsonPropertyName("purls")] IReadOnlyList<string>? PackageUrls,
-    [property: JsonPropertyName("cpes")] IReadOnlyList<string>? Cpes,
-    [property: JsonPropertyName("references")] IReadOnlyList<AdvisoryLinksetReferenceRequest>? References,
-    [property: JsonPropertyName("reconciledFrom")] IReadOnlyList<string>? ReconciledFrom,
-    [property: JsonPropertyName("notes")] IDictionary<string, string>? Notes);
-
-public sealed record AdvisoryLinksetReferenceRequest(
-    [property: JsonPropertyName("type")] string Type,
-    [property: JsonPropertyName("url")] string Url,
-    [property: JsonPropertyName("source")] string? Source);
+public sealed record AdvisoryLinksetRequest(
+    [property: JsonPropertyName("aliases")] IReadOnlyList<string>? Aliases,
+    [property: JsonPropertyName("scopes")] IReadOnlyList<string>? Scopes,
+    [property: JsonPropertyName("relationships")] IReadOnlyList<AdvisoryLinksetRelationshipRequest>? Relationships,
+    [property: JsonPropertyName("purls")] IReadOnlyList<string>? PackageUrls,
+    [property: JsonPropertyName("cpes")] IReadOnlyList<string>? Cpes,
+    [property: JsonPropertyName("references")] IReadOnlyList<AdvisoryLinksetReferenceRequest>? References,
+    [property: JsonPropertyName("reconciledFrom")] IReadOnlyList<string>? ReconciledFrom,
+    [property: JsonPropertyName("notes")] IDictionary<string, string>? Notes);
+
+public sealed record AdvisoryLinksetRelationshipRequest(
+    [property: JsonPropertyName("type")] string Type,
+    [property: JsonPropertyName("source")] string Source,
+    [property: JsonPropertyName("target")] string Target,
+    [property: JsonPropertyName("provenance")] string? Provenance);
+
+public sealed record AdvisoryLinksetReferenceRequest(
+    [property: JsonPropertyName("type")] string Type,
+    [property: JsonPropertyName("url")] string Url,
+    [property: JsonPropertyName("source")] string? Source);
 
 public sealed record AdvisoryIngestResponse(
     [property: JsonPropertyName("id")] string Id,