feat: Add initial implementation of Vulnerability Resolver Jobs

- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.

src/Findings/StellaOps.Findings.Ledger/Infrastructure/Postgres/PostgresLedgerEventRepository.cs

@@ -24,7 +24,8 @@ public sealed class PostgresLedgerEventRepository : ILedgerEventRepository
                event_body,
                event_hash,
                previous_hash,
-               merkle_leaf_hash
+               merkle_leaf_hash,
+               evidence_bundle_ref
           FROM ledger_events
          WHERE tenant_id = @tenant_id
            AND event_id = @event_id
@@ -59,7 +60,8 @@ public sealed class PostgresLedgerEventRepository : ILedgerEventRepository
             event_body,
             event_hash,
             previous_hash,
-            merkle_leaf_hash)
+            merkle_leaf_hash,
+            evidence_bundle_ref)
         VALUES (
             @tenant_id,
             @chain_id,
@@ -77,7 +79,8 @@ public sealed class PostgresLedgerEventRepository : ILedgerEventRepository
             @event_body,
             @event_hash,
             @previous_hash,
-            @merkle_leaf_hash)
+            @merkle_leaf_hash,
+            @evidence_bundle_ref)
         """;
 
     private readonly LedgerDataSource _dataSource;
@@ -162,6 +165,7 @@ public sealed class PostgresLedgerEventRepository : ILedgerEventRepository
         command.Parameters.AddWithValue("event_hash", record.EventHash);
         command.Parameters.AddWithValue("previous_hash", record.PreviousHash);
         command.Parameters.AddWithValue("merkle_leaf_hash", record.MerkleLeafHash);
+        command.Parameters.AddWithValue("evidence_bundle_ref", (object?)record.EvidenceBundleReference ?? DBNull.Value);
 
         try
         {
@@ -194,6 +198,7 @@ public sealed class PostgresLedgerEventRepository : ILedgerEventRepository
         var eventHash = reader.GetString(12);
         var previousHash = reader.GetString(13);
         var merkleLeafHash = reader.GetString(14);
+        var evidenceBundleRef = reader.IsDBNull(15) ? null : reader.GetString(15);
 
         var canonicalEnvelope = LedgerCanonicalJsonSerializer.Canonicalize(eventBody);
         var canonicalJson = LedgerCanonicalJsonSerializer.Serialize(canonicalEnvelope);
@@ -216,6 +221,37 @@ public sealed class PostgresLedgerEventRepository : ILedgerEventRepository
             eventHash,
             previousHash,
             merkleLeafHash,
-            canonicalJson);
+            canonicalJson,
+            evidenceBundleRef);
+    }
+
+    public async Task<IReadOnlyList<EvidenceReference>> GetEvidenceReferencesAsync(string tenantId, string findingId, CancellationToken cancellationToken)
+    {
+        const string sql = """
+            SELECT event_id, evidence_bundle_ref, recorded_at
+              FROM ledger_events
+             WHERE tenant_id = @tenant_id
+               AND finding_id = @finding_id
+               AND evidence_bundle_ref IS NOT NULL
+             ORDER BY recorded_at DESC
+            """;
+
+        await using var connection = await _dataSource.OpenConnectionAsync(tenantId, cancellationToken).ConfigureAwait(false);
+        await using var command = new NpgsqlCommand(sql, connection);
+        command.CommandTimeout = _dataSource.CommandTimeoutSeconds;
+        command.Parameters.AddWithValue("tenant_id", tenantId);
+        command.Parameters.AddWithValue("finding_id", findingId);
+
+        await using var reader = await command.ExecuteReaderAsync(cancellationToken).ConfigureAwait(false);
+        var results = new List<EvidenceReference>();
+        while (await reader.ReadAsync(cancellationToken).ConfigureAwait(false))
+        {
+            results.Add(new EvidenceReference(
+                reader.GetGuid(0),
+                reader.GetString(1),
+                reader.GetFieldValue<DateTimeOffset>(2)));
+        }
+
+        return results;
     }
 }