feat: Initialize Zastava Webhook service with TLS and Authority authentication

- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.

docs/events/samples/scanner.report.ready@1.sample.json

@@ -0,0 +1,70 @@
+{
+  "eventId": "6d2d1b77-f3c3-4f70-8a9d-6f2d0c8801ab",
+  "kind": "scanner.report.ready",
+  "tenant": "tenant-alpha",
+  "ts": "2025-10-19T12:34:56+00:00",
+  "scope": {
+    "namespace": "acme/edge",
+    "repo": "api",
+    "digest": "sha256:feedface",
+    "labels": {},
+    "attributes": {}
+  },
+  "payload": {
+    "delta": {
+      "kev": ["CVE-2024-9999"],
+      "newCritical": 1
+    },
+    "dsse": {
+      "payload": "eyJyZXBvcnRJZCI6InJlcG9ydC1hYmMiLCJpbWFnZURpZ2VzdCI6InNoYTI1NjpmZWVkZmFjZSIsImdlbmVyYXRlZEF0IjoiMjAyNS0xMC0xOVQxMjozNDo1NiswMDowMCIsInZlcmRpY3QiOiJibG9ja2VkIiwicG9saWN5Ijp7InJldmlzaW9uSWQiOiJyZXYtNDIiLCJkaWdlc3QiOiJkaWdlc3QtMTIzIn0sInN1bW1hcnkiOnsidG90YWwiOjEsImJsb2NrZWQiOjEsIndhcm5lZCI6MCwiaWdub3JlZCI6MCwicXVpZXRlZCI6MH0sInZlcmRpY3RzIjpbeyJmaW5kaW5nSWQiOiJmaW5kaW5nLTEiLCJzdGF0dXMiOiJCbG9ja2VkIiwic2NvcmUiOjQ3LjUsInNvdXJjZVRydXN0IjoiTlZEIiwicmVhY2hhYmlsaXR5IjoicnVudGltZSJ9XSwiaXNzdWVzIjpbXX0=",
+      "payloadType": "application/vnd.stellaops.report\u002Bjson",
+      "signatures": [{
+        "algorithm": "hs256",
+        "keyId": "test-key",
+        "signature": "signature-value"
+      }]
+    },
+    "generatedAt": "2025-10-19T12:34:56+00:00",
+    "links": {
+      "ui": "https://scanner.example/ui/reports/report-abc"
+    },
+    "quietedFindingCount": 0,
+    "report": {
+      "generatedAt": "2025-10-19T12:34:56+00:00",
+      "imageDigest": "sha256:feedface",
+      "issues": [],
+      "policy": {
+        "digest": "digest-123",
+        "revisionId": "rev-42"
+      },
+      "reportId": "report-abc",
+      "summary": {
+        "blocked": 1,
+        "ignored": 0,
+        "quieted": 0,
+        "total": 1,
+        "warned": 0
+      },
+      "verdict": "blocked",
+      "verdicts": [
+        {
+          "findingId": "finding-1",
+          "status": "Blocked",
+          "score": 47.5,
+          "sourceTrust": "NVD",
+          "reachability": "runtime"
+        }
+      ]
+    },
+    "reportId": "report-abc",
+    "summary": {
+      "blocked": 1,
+      "ignored": 0,
+      "quieted": 0,
+      "total": 1,
+      "warned": 0
+    },
+    "verdict": "fail"
+  },
+  "attributes": {}
+}