Add post-quantum cryptography support with PqSoftCryptoProvider

- Implemented PqSoftCryptoProvider for software-only post-quantum algorithms (Dilithium3, Falcon512) using BouncyCastle.
- Added PqSoftProviderOptions and PqSoftKeyOptions for configuration.
- Created unit tests for Dilithium3 and Falcon512 signing and verification.
- Introduced EcdsaPolicyCryptoProvider for compliance profiles (FIPS/eIDAS) with explicit allow-lists.
- Added KcmvpHashOnlyProvider for KCMVP baseline compliance.
- Updated project files and dependencies for new libraries and testing frameworks.

ops/devops/findings-ledger/compose/env/ledger.dev.env

@@ -0,0 +1,24 @@
+# Findings Ledger - Development Environment
+# Copy to ledger.local.env and customize for local dev
+
+# Database connection
+LEDGER__DB__CONNECTIONSTRING=Host=postgres;Port=5432;Database=findings_ledger_dev;Username=ledger;Password=change_me_dev;
+
+# Attachment encryption key (AES-256, base64 encoded)
+# Generate with: openssl rand -base64 32
+LEDGER__ATTACHMENTS__ENCRYPTIONKEY=
+
+# Merkle anchor signing (optional in dev)
+LEDGER__MERKLE__SIGNINGKEY=
+
+# Authority service endpoint (for JWT validation)
+LEDGER__AUTHORITY__BASEURL=http://authority:8080
+
+# Logging level
+Logging__LogLevel__Default=Debug
+Logging__LogLevel__Microsoft=Information
+Logging__LogLevel__StellaOps=Debug
+
+# Feature flags
+LEDGER__FEATURES__ENABLEATTACHMENTS=true
+LEDGER__FEATURES__ENABLEAUDITLOG=true