feat: Implement vulnerability token signing and verification utilities

- Added VulnTokenSigner for signing JWT tokens with specified algorithms and keys.
- Introduced VulnTokenUtilities for resolving tenant and subject claims, and sanitizing context dictionaries.
- Created VulnTokenVerificationUtilities for parsing tokens, verifying signatures, and deserializing payloads.
- Developed VulnWorkflowAntiForgeryTokenIssuer for issuing anti-forgery tokens with configurable options.
- Implemented VulnWorkflowAntiForgeryTokenVerifier for verifying anti-forgery tokens and validating payloads.
- Added AuthorityVulnerabilityExplorerOptions to manage configuration for vulnerability explorer features.
- Included tests for FilesystemPackRunDispatcher to ensure proper job handling under egress policy restrictions.

docs/api/scanner/windows-macos-summary.md

@@ -0,0 +1,37 @@
+# Scanner API — Windows/macOS Coverage Dashboard (Draft)
+
+> Owners: Product Guild, Scanner Guild • Status: living document updated every sprint
+
+## At-a-glance metrics (Sprint 132 intake)
+- macOS demand entries logged: 1 (Northwind Health Services, 2025-11-03)
+- Windows demand entries logged: 1 (FinSecure Corp, 2025-11-03)
+- Qualified customers awaiting roadmap response: 1 (FinSecure PCI blocker)
+- Open policy readiness items: POLICY-READINESS-0001, POLICY-READINESS-0002
+
+## Cross-reference
+| Resource | Purpose |
+| --- | --- |
+| docs/benchmarks/scanner/windows-macos-demand.md | Signal log & next actions |
+| docs/benchmarks/scanner/windows-macos-interview-template.md | Interview capture template |
+| docs/benchmarks/scanner/deep-dives/macos.md | macOS implementation roadmap |
+| docs/benchmarks/scanner/deep-dives/windows.md | Windows implementation roadmap |
+| docs/modules/scanner/design/macos-analyzer.md | Detailed macOS design |
+| docs/modules/scanner/design/windows-analyzer.md | Detailed Windows design |
+| docs/modules/policy/windows-package-readiness.md | Policy readiness for Windows packages |
+| docs/modules/policy/secret-leak-detection-readiness.md | Policy readiness for secrets |
+| docs/modules/scanner/TASKS.md | Engineering backlog (SCANNER-ENG-0020..0027) |
+| docs/modules/policy/TASKS.md | Policy readiness tasks |
+| docs/api/scanner/windows-coverage.md | Narrative summary |
+
+## Maintenance cadence
+- Update metrics and cross-links after each customer signal or roadmap checkpoint.
+- Ensure DOCS-SCANNER-BENCH-62-002/016 status mirrors demand tracker progress.
+
+## Upcoming milestones
+- 2025-11-07: POLICY-READINESS-0002 Authenticode/feed decision for FinSecure (unblocks Windows analyzer spike).
+- 2025-11-10: POLICY-READINESS-0001 workshop during Northwind demo to finalise masking/telemetry posture.
+
+## Recent updates
+- 2025-11-03: Logged Northwind Health Services (macOS) & FinSecure Corp (Windows); awaiting POLICY-READINESS-0001/0002 decisions before scheduling analyzer spikes.
+
+Last updated: 2025-11-03 (initial demand entries logged).