Add signal contracts for reachability, exploitability, trust, and unknown symbols

- Introduced `ReachabilityState`, `RuntimeHit`, `ExploitabilitySignal`, `ReachabilitySignal`, `SignalEnvelope`, `SignalType`, `TrustSignal`, and `UnknownSymbolSignal` records to define various signal types and their properties.
- Implemented JSON serialization attributes for proper data interchange.
- Created project files for the new signal contracts library and corresponding test projects.
- Added deterministic test fixtures for micro-interaction testing.
- Included cryptographic keys for secure operations with cosign.

src/Web/StellaOps.Web/scripts/storybook.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+/**
+ * Minimal Storybook wrapper to avoid missing legacy CLI bins.
+ * Supports:
+ *   node scripts/storybook.js dev --ci --quiet --port 4600
+ *   node scripts/storybook.js build --quiet
+ */
+const { dev, build } = require('@storybook/core-server');
+
+const args = process.argv.slice(2);
+const mode = args.shift() ?? 'dev';
+
+const hasFlag = (flag) => args.includes(flag);
+const getFlagValue = (flag) => {
+  const idx = args.indexOf(flag);
+  return idx >= 0 ? args[idx + 1] : undefined;
+};
+
+const ci = hasFlag('--ci') || process.env.CI === 'true';
+const quiet = hasFlag('--quiet') || hasFlag('-q');
+const port = Number(getFlagValue('--port') ?? process.env.STORYBOOK_PORT ?? 4600);
+const host = process.env.STORYBOOK_HOST ?? '127.0.0.1';
+const configDir = process.env.STORYBOOK_CONFIG_DIR ?? '.storybook';
+const outputDir = process.env.STORYBOOK_OUTPUT_DIR ?? 'storybook-static';
+
+async function run() {
+  if (mode === 'build') {
+    await build({
+      configDir,
+      outputDir,
+      quiet,
+      loglevel: quiet ? 'warn' : 'info',
+    });
+    return;
+  }
+
+  await dev({
+    configDir,
+    port,
+    host,
+    ci,
+    quiet,
+    loglevel: quiet ? 'warn' : 'info',
+  });
+}
+
+run().catch((err) => {
+  console.error(err);
+  process.exit(1);
+});