Add tests for SBOM generation determinism across multiple formats

- Created `StellaOps.TestKit.Tests` project for unit tests related to determinism.
- Implemented `DeterminismManifestTests` to validate deterministic output for canonical bytes and strings, file read/write operations, and error handling for invalid schema versions.
- Added `SbomDeterminismTests` to ensure identical inputs produce consistent SBOMs across SPDX 3.0.1 and CycloneDX 1.6/1.7 formats, including parallel execution tests.
- Updated project references in `StellaOps.Integration.Determinism` to include the new determinism testing library.

docs2/observability.md

@@ -1,14 +1,23 @@
 # Observability
 
-## Telemetry signals
-- Metrics for scan latency, cache hit rate, policy evaluation time, queue depth.
-- Logs are structured and include correlation IDs.
-- Traces connect Scanner, Policy, Scheduler, and Notify workflows.
+Overview
+- Deterministic metrics, logs, and traces with tenant isolation.
+- Offline-friendly exports for audits and air-gap review.
 
-## Audit trails
-- Signing and policy actions are recorded for compliance.
-- Tenant and actor metadata is included in audit records.
+Core references
+- observability-standards.md
+- observability-logging.md
+- observability-tracing.md
+- observability-metrics-slos.md
+- observability-telemetry-controls.md
 
-## Telemetry stack
-- Telemetry module provides collectors, dashboards, and alert rules.
-- Offline bundles include telemetry assets for air-gapped installs.
+Service and workflow observability
+- observability-aoc.md
+- observability-aggregation.md
+- observability-policy.md
+- observability-ui-telemetry.md
+- observability-vuln-telemetry.md
+
+Audit alignment
+- security/forensics-and-evidence-locker.md
+- security/timeline.md