feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries

- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys.
- Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations.
- Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.

docs/events/scanner.event.report.ready@1.json

@@ -122,16 +122,15 @@
           "type": "object",
           "description": "Policy revision metadata surfaced alongside the report."
         },
-        "links": {
-          "type": "object",
-          "additionalProperties": false,
-          "properties": {
-            "ui": {"type": "string", "format": "uri"},
-            "report": {"type": "string", "format": "uri"},
-            "policy": {"type": "string", "format": "uri"},
-            "attestation": {"type": "string", "format": "uri"}
-          }
-        },
+        "links": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "report": {"$ref": "#/definitions/linkTarget"},
+            "policy": {"$ref": "#/definitions/linkTarget"},
+            "attestation": {"$ref": "#/definitions/linkTarget"}
+          }
+        },
         "dsse": {
           "type": "object",
           "additionalProperties": false,
@@ -161,4 +160,14 @@
       }
     }
   }
-}
+  "definitions": {
+    "linkTarget": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "ui": {"type": "string", "format": "uri"},
+        "api": {"type": "string", "format": "uri"}
+      }
+    }
+  }
+}