feat: Initialize Zastava Webhook service with TLS and Authority authentication

- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.

src/StellaOps.Scanner.Analyzers.OS/Analyzers/OsPackageAnalyzerBase.cs

@@ -0,0 +1,41 @@
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Analyzers.OS.Abstractions;
+
+namespace StellaOps.Scanner.Analyzers.OS.Analyzers;
+
+public abstract class OsPackageAnalyzerBase : IOSPackageAnalyzer
+{
+    protected OsPackageAnalyzerBase(ILogger logger)
+    {
+        Logger = logger ?? throw new ArgumentNullException(nameof(logger));
+    }
+
+    public abstract string AnalyzerId { get; }
+
+    protected ILogger Logger { get; }
+
+    public async ValueTask<OSPackageAnalyzerResult> AnalyzeAsync(OSPackageAnalyzerContext context, CancellationToken cancellationToken)
+    {
+        ArgumentNullException.ThrowIfNull(context);
+
+        var stopwatch = Stopwatch.StartNew();
+        var packages = await ExecuteCoreAsync(context, cancellationToken).ConfigureAwait(false);
+        stopwatch.Stop();
+
+        var packageCount = packages.Count;
+        var fileEvidenceCount = 0;
+        foreach (var package in packages)
+        {
+            fileEvidenceCount += package.Files.Count;
+        }
+
+        var telemetry = new OSAnalyzerTelemetry(stopwatch.Elapsed, packageCount, fileEvidenceCount);
+        return new OSPackageAnalyzerResult(AnalyzerId, packages, telemetry);
+    }
+
+    protected abstract ValueTask<IReadOnlyList<OSPackageRecord>> ExecuteCoreAsync(OSPackageAnalyzerContext context, CancellationToken cancellationToken);
+}