feat: Enhance Authority Identity Provider Registry with Bootstrap Capability

- Added support for bootstrap providers in AuthorityIdentityProviderRegistry.
- Introduced a new property for bootstrap providers and updated AggregateCapabilities.
- Updated relevant methods to handle bootstrap capabilities during provider registration.

feat: Introduce Sealed Mode Status in OpenIddict Handlers

- Added SealedModeStatusProperty to AuthorityOpenIddictConstants.
- Enhanced ValidateClientCredentialsHandler, ValidatePasswordGrantHandler, and ValidateRefreshTokenGrantHandler to validate sealed mode evidence.
- Implemented logic to handle airgap seal confirmation requirements.

feat: Update Program Configuration for Sealed Mode

- Registered IAuthoritySealedModeEvidenceValidator in Program.cs.
- Added logging for bootstrap capabilities in identity provider plugins.
- Implemented checks for bootstrap support in API endpoints.

chore: Update Tasks and Documentation

- Marked AUTH-MTLS-11-002 as DONE in TASKS.md.
- Updated documentation to reflect changes in sealed mode and bootstrap capabilities.

fix: Improve CLI Command Handlers Output

- Enhanced output formatting for command responses and prompts in CommandHandlers.cs.

feat: Extend Advisory AI Models

- Added Response property to AdvisoryPipelineOutputModel for better output handling.

fix: Adjust Concelier Web Service Authentication

- Improved JWT token handling in Concelier Web Service to ensure proper token extraction and logging.

test: Enhance Web Service Endpoints Tests

- Added detailed logging for authentication failures in WebServiceEndpointsTests.
- Enabled PII logging for better debugging of authentication issues.

feat: Introduce Air-Gap Configuration Options

- Added AuthorityAirGapOptions and AuthoritySealedModeOptions to StellaOpsAuthorityOptions.
- Implemented validation logic for air-gap configurations to ensure proper setup.

src/Cli/StellaOps.Cli/Commands/CommandHandlers.cs

@@ -6339,15 +6339,26 @@ internal static class CommandHandlers
 
         console.Write(summary);
 
-        if (!string.IsNullOrWhiteSpace(output.Prompt))
+        if (!string.IsNullOrWhiteSpace(output.Response))
         {
-            var panel = new Panel(new Markup(Markup.Escape(output.Prompt)))
+            var responsePanel = new Panel(new Markup(Markup.Escape(output.Response)))
             {
-                Header = new PanelHeader("Prompt"),
+                Header = new PanelHeader("Response"),
                 Border = BoxBorder.Rounded,
                 Expand = true
             };
-            console.Write(panel);
+            console.Write(responsePanel);
+        }
+
+        if (!string.IsNullOrWhiteSpace(output.Prompt))
+        {
+            var promptPanel = new Panel(new Markup(Markup.Escape(output.Prompt)))
+            {
+                Header = new PanelHeader("Prompt (sanitized)"),
+                Border = BoxBorder.Rounded,
+                Expand = true
+            };
+            console.Write(promptPanel);
         }
 
         if (output.Citations.Count > 0)