release orchestrator v1 draft and build fixes

src/Cli/StellaOps.Cli/Program.cs

@@ -18,6 +18,7 @@ using StellaOps.Policy.Scoring.Engine;
 using StellaOps.ExportCenter.Client;
 using StellaOps.ExportCenter.Core.EvidenceCache;
 using StellaOps.Verdict;
+using StellaOps.Scanner.PatchVerification.DependencyInjection;
 #if DEBUG || STELLAOPS_ENABLE_SIMULATOR
 using StellaOps.Cryptography.Plugin.SimRemote.DependencyInjection;
 #endif
@@ -321,6 +322,9 @@ internal static class Program
         // CLI-CRYPTO-4100-001: Crypto profile validator
         services.AddSingleton<CryptoProfileValidator>();
 
+        // CLI-PATCHVERIFY-001-004: Patch verification services (SPRINT_20260111_001_004)
+        services.AddPatchVerification();
+
         await using var serviceProvider = services.BuildServiceProvider();
         var loggerFactory = serviceProvider.GetRequiredService<ILoggerFactory>();
         var startupLogger = loggerFactory.CreateLogger("StellaOps.Cli.Startup");