feat: Add MongoIdempotencyStoreOptions for MongoDB configuration

feat: Implement BsonJsonConverter for converting BsonDocument and BsonArray to JSON

fix: Update project file to include MongoDB.Bson package

test: Add GraphOverlayExporterTests to validate NDJSON export functionality

refactor: Refactor Program.cs in Attestation Tool for improved argument parsing and error handling

docs: Update README for stella-forensic-verify with usage instructions and exit codes

feat: Enhance HmacVerifier with clock skew and not-after checks

feat: Add MerkleRootVerifier and ChainOfCustodyVerifier for additional verification methods

fix: Update DenoRuntimeShim to correctly handle file paths

feat: Introduce ComposerAutoloadData and related parsing in ComposerLockReader

test: Add tests for Deno runtime execution and verification

test: Enhance PHP package tests to include autoload data verification

test: Add unit tests for HmacVerifier and verification logic

docs/modules/concelier/link-not-merge-schema.md

@@ -104,7 +104,8 @@ _Frozen v1 (add-only) — approved 2025-11-17 for CONCELIER-LNM-21-001/002/101._
       "properties":{
         "field":{"bsonType":"string"},
         "reason":{"bsonType":"string"},
-        "values":{"bsonType":"array","items":{"bsonType":"string"}}
+        "values":{"bsonType":"array","items":{"bsonType":"string"}},
+        "sourceIds":{"bsonType":"array","items":{"bsonType":"string"}}
       }}},
     "createdAt":{"bsonType":"date"},
     "builtByJobId":{"bsonType":"string"},
@@ -121,6 +122,7 @@ _Frozen v1 (add-only) — approved 2025-11-17 for CONCELIER-LNM-21-001/002/101._
 - Built from a set of observation IDs; never overwrites observations.
 - Carries the hash list of source observations for audit/replay.
 - Deterministic sort: observations sorted by `source, advisoryId, fetchedAt` before hashing.
+- Conflicts are additive only and now carry optional `sourceIds[]` to trace which upstream sources produced divergent values.
 
 ## Indexes (Mongo)
 - Observations: `{ tenantId:1, source:1, advisoryId:1, provenance.fetchedAt:-1 }` (compound for ingest); `{ provenance.sourceArtifactSha:1 }` unique to avoid dup writes.