feat: Initialize Zastava Webhook service with TLS and Authority authentication

- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.

src/StellaOps.Scanner.Queue/Nats/NatsScanQueueLease.cs

@@ -23,6 +23,7 @@ internal sealed class NatsScanQueueLease : IScanQueueLease
         DateTimeOffset leaseExpiresAt,
         string consumer,
         string? idempotencyKey,
+        string? traceId,
         IReadOnlyDictionary<string, string> attributes)
     {
         _queue = queue;
@@ -35,6 +36,7 @@ internal sealed class NatsScanQueueLease : IScanQueueLease
         LeaseExpiresAt = leaseExpiresAt;
         Consumer = consumer;
         IdempotencyKey = idempotencyKey;
+        TraceId = traceId;
         Attributes = attributes;
     }
 
@@ -54,6 +56,8 @@ internal sealed class NatsScanQueueLease : IScanQueueLease
 
     public string? IdempotencyKey { get; }
 
+    public string? TraceId { get; }
+
     public IReadOnlyDictionary<string, string> Attributes { get; }
 
     internal NatsJSMsg<byte[]> Message => _message;