feat: Initialize Zastava Webhook service with TLS and Authority authentication

- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.

samples/scanner/images/dotnet-aot/inventory.cdx.json

@@ -0,0 +1,40 @@
+{
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5",
+  "version": 1,
+  "metadata": {
+    "timestamp": "2025-10-19T00:00:00Z",
+    "component": {
+      "type": "container",
+      "name": "dotnet-aot",
+      "version": "8.0.0",
+      "bomRef": "pkg:docker/stellaops/sample-dotnet-aot@sha256:5be6f3ad9d2b1e4fcb4c6f40d9c664fca97f5b4d9ccb8e1d8f970e8b2bce1123"
+    }
+  },
+  "components": [
+    {
+      "type": "application",
+      "bomRef": "pkg:nuget/Sample.Worker@1.0.0",
+      "name": "Sample.Worker",
+      "version": "1.0.0"
+    },
+    {
+      "type": "library",
+      "bomRef": "pkg:nuget/Microsoft.Extensions.Hosting@8.0.0",
+      "name": "Microsoft.Extensions.Hosting",
+      "version": "8.0.0"
+    },
+    {
+      "type": "library",
+      "bomRef": "pkg:nuget/System.Text.Json@8.0.0",
+      "name": "System.Text.Json",
+      "version": "8.0.0"
+    },
+    {
+      "type": "library",
+      "bomRef": "pkg:nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross@8.0.0",
+      "name": "NativeAotRuntime",
+      "version": "8.0.0"
+    }
+  ]
+}