feat: Implement vulnerability token signing and verification utilities

- Added VulnTokenSigner for signing JWT tokens with specified algorithms and keys.
- Introduced VulnTokenUtilities for resolving tenant and subject claims, and sanitizing context dictionaries.
- Created VulnTokenVerificationUtilities for parsing tokens, verifying signatures, and deserializing payloads.
- Developed VulnWorkflowAntiForgeryTokenIssuer for issuing anti-forgery tokens with configurable options.
- Implemented VulnWorkflowAntiForgeryTokenVerifier for verifying anti-forgery tokens and validating payloads.
- Added AuthorityVulnerabilityExplorerOptions to manage configuration for vulnerability explorer features.
- Included tests for FilesystemPackRunDispatcher to ensure proper job handling under egress policy restrictions.

src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Infrastructure/Execution/FilesystemPackRunDispatcher.cs

@@ -1,8 +1,9 @@
-using System.Text.Json;
-using System.Text.Json.Nodes;
-using StellaOps.TaskRunner.Core.Execution;
-using StellaOps.TaskRunner.Core.Planning;
-using StellaOps.TaskRunner.Core.TaskPacks;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using StellaOps.AirGap.Policy;
+using StellaOps.TaskRunner.Core.Execution;
+using StellaOps.TaskRunner.Core.Planning;
+using StellaOps.TaskRunner.Core.TaskPacks;
 
 namespace StellaOps.TaskRunner.Infrastructure.Execution;
 
@@ -10,17 +11,18 @@ public sealed class FilesystemPackRunDispatcher : IPackRunJobDispatcher
 {
     private readonly string queuePath;
     private readonly string archivePath;
-    private readonly TaskPackManifestLoader manifestLoader = new();
-    private readonly TaskPackPlanner planner = new();
+    private readonly TaskPackManifestLoader manifestLoader = new();
+    private readonly TaskPackPlanner planner;
     private readonly JsonSerializerOptions serializerOptions = new(JsonSerializerDefaults.Web);
 
-    public FilesystemPackRunDispatcher(string queuePath, string archivePath)
-    {
-        this.queuePath = queuePath ?? throw new ArgumentNullException(nameof(queuePath));
-        this.archivePath = archivePath ?? throw new ArgumentNullException(nameof(archivePath));
-        Directory.CreateDirectory(queuePath);
-        Directory.CreateDirectory(archivePath);
-    }
+    public FilesystemPackRunDispatcher(string queuePath, string archivePath, IEgressPolicy? egressPolicy = null)
+    {
+        this.queuePath = queuePath ?? throw new ArgumentNullException(nameof(queuePath));
+        this.archivePath = archivePath ?? throw new ArgumentNullException(nameof(archivePath));
+        planner = new TaskPackPlanner(egressPolicy);
+        Directory.CreateDirectory(queuePath);
+        Directory.CreateDirectory(archivePath);
+    }
 
     public async Task<PackRunExecutionContext?> TryDequeueAsync(CancellationToken cancellationToken)
     {
@@ -34,8 +36,12 @@ public sealed class FilesystemPackRunDispatcher : IPackRunJobDispatcher
 
             try
             {
-                var jobJson = await File.ReadAllTextAsync(file, cancellationToken).ConfigureAwait(false);
-                var job = JsonSerializer.Deserialize<JobEnvelope>(jobJson, serializerOptions) ?? continue;
+                var jobJson = await File.ReadAllTextAsync(file, cancellationToken).ConfigureAwait(false);
+                var job = JsonSerializer.Deserialize<JobEnvelope>(jobJson, serializerOptions);
+                if (job is null)
+                {
+                    continue;
+                }
 
                 var manifestPath = ResolvePath(queuePath, job.ManifestPath);
                 var inputsPath = job.InputsPath is null ? null : ResolvePath(queuePath, job.InputsPath);