feat(aoc): add RequireAocGuard route helper and associated tests

- Introduced RequireAocGuard extension method for RouteHandlerBuilder to enforce AOC guard on routes.
- Implemented two overloads of RequireAocGuard to support different payload selection strategies.
- Added unit tests for RequireAocGuard to ensure correct behavior and exception handling.
- Updated TASKS.md to reflect the addition of RequireAocGuard and related documentation.
- Made internal members of Concelier.WebService visible to its test project.

src/Aoc/__Libraries/StellaOps.Aoc.AspNetCore/Routing/AocGuardEndpointFilterExtensions.cs

@@ -0,0 +1,60 @@
+using System;
+using System.Collections.Generic;
+using System.Text.Json;
+using Microsoft.AspNetCore.Builder;
+
+namespace StellaOps.Aoc.AspNetCore.Routing;
+
+public static class AocGuardEndpointFilterExtensions
+{
+    public static RouteHandlerBuilder RequireAocGuard<TRequest>(
+        this RouteHandlerBuilder builder,
+        Func<TRequest, IEnumerable<object?>> payloadSelector,
+        JsonSerializerOptions? serializerOptions = null,
+        AocGuardOptions? guardOptions = null)
+    {
+        if (builder is null)
+        {
+            throw new ArgumentNullException(nameof(builder));
+        }
+
+        if (payloadSelector is null)
+        {
+            throw new ArgumentNullException(nameof(payloadSelector));
+        }
+
+        builder.Add(endpointBuilder =>
+        {
+            endpointBuilder.FilterFactories.Add((routeContext, next) =>
+            {
+                var filter = new AocGuardEndpointFilter<TRequest>(payloadSelector, serializerOptions, guardOptions);
+                return invocationContext => filter.InvokeAsync(invocationContext, next);
+            });
+        });
+        return builder;
+    }
+
+    public static RouteHandlerBuilder RequireAocGuard<TRequest>(
+        this RouteHandlerBuilder builder,
+        Func<TRequest, object?> payloadSelector,
+        JsonSerializerOptions? serializerOptions = null,
+        AocGuardOptions? guardOptions = null)
+    {
+        if (payloadSelector is null)
+        {
+            throw new ArgumentNullException(nameof(payloadSelector));
+        }
+
+        return AocGuardEndpointFilterExtensions.RequireAocGuard<TRequest>(
+            builder,
+            request =>
+            {
+                var payload = payloadSelector(request);
+                return payload is null
+                    ? Array.Empty<object?>()
+                    : new object?[] { payload };
+            },
+            serializerOptions,
+            guardOptions);
+    }
+}