release orchestrator v1 draft and build fixes

src/Scanner/StellaOps.Scanner.Worker/Processing/ScanJobContext.cs

@@ -6,6 +6,8 @@ namespace StellaOps.Scanner.Worker.Processing;
 
 public sealed class ScanJobContext
 {
+    private const string ImageDigestMetadataKey = "image.digest";
+
     public ScanJobContext(IScanJobLease lease, TimeProvider timeProvider, DateTimeOffset startUtc, CancellationToken cancellationToken)
     {
         Lease = lease ?? throw new ArgumentNullException(nameof(lease));
@@ -27,6 +29,12 @@ public sealed class ScanJobContext
 
     public string ScanId => Lease.ScanId;
 
+    /// <summary>
+    /// Gets the OCI image digest from job metadata, if available.
+    /// </summary>
+    public string? ImageDigest =>
+        Lease.Metadata.TryGetValue(ImageDigestMetadataKey, out var digest) ? digest : null;
+
     public string? ReplayBundlePath { get; set; }
 
     public ScanAnalysisStore Analysis { get; }