feat(docs): Add comprehensive documentation for Vexer, Vulnerability Explorer, and Zastava modules

- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes.
- Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes.
- Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables.
- Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.

docs/README.md

@@ -36,21 +36,21 @@ Everything here is open‑source and versioned — when you check out a git ta
 - **07 – [High‑Level Architecture](07_HIGH_LEVEL_ARCHITECTURE.md)**
 - **08 – [Architecture Decision Records](adr/index.md)**
 - **08 – Module Architecture Dossiers**  
-  - [Architecture Overview](architecture/overview.md)  
-  - [Scanner](ARCHITECTURE_SCANNER.md)  
-  - [Concelier](ARCHITECTURE_CONCELIER.md)  
-  - [Excititor](ARCHITECTURE_EXCITITOR.md)  
-  - [Excititor Mirrors](ARCHITECTURE_EXCITITOR_MIRRORS.md)  
-  - [Signer](ARCHITECTURE_SIGNER.md)  
-  - [Attestor](ARCHITECTURE_ATTESTOR.md)  
-  - [Authority](ARCHITECTURE_AUTHORITY.md)
-  - [Policy Engine](architecture/policy-engine.md)
-  - [Notify](ARCHITECTURE_NOTIFY.md)
-  - [Scheduler](ARCHITECTURE_SCHEDULER.md)  
-  - [CLI](ARCHITECTURE_CLI.md)  
-  - [Web UI](ARCHITECTURE_UI.md)  
-  - [Zastava Runtime](ARCHITECTURE_ZASTAVA.md)  
-  - [Release & Operations](ARCHITECTURE_DEVOPS.md)
+  - [Architecture Overview](modules/platform/architecture-overview.md)  
+  - [Scanner](modules/scanner/architecture.md)  
+  - [Concelier](modules/concelier/architecture.md)  
+  - [Excititor](modules/excititor/architecture.md)  
+  - [Excititor Mirrors](modules/excititor/mirrors.md)  
+  - [Signer](modules/signer/architecture.md)  
+  - [Attestor](modules/attestor/architecture.md)  
+  - [Authority](modules/authority/architecture.md)
+  - [Policy Engine](modules/policy/architecture.md)
+  - [Notify](modules/notify/architecture.md)
+  - [Scheduler](modules/scheduler/architecture.md)  
+  - [CLI](modules/cli/architecture.md)  
+  - [Web UI](modules/ui/architecture.md)  
+  - [Zastava Runtime](modules/zastava/architecture.md)  
+  - [Release & Operations](modules/devops/architecture.md)
 - **09 – [API & CLI Reference](09_API_CLI_REFERENCE.md)**
 - **10 – [Plug‑in SDK Guide](10_PLUGIN_SDK_GUIDE.md)**
 - **10 – [Concelier CLI Quickstart](10_CONCELIER_CLI_QUICKSTART.md)**
@@ -60,13 +60,14 @@ Everything here is open‑source and versioned — when you check out a git ta
 - **31 – [Aggregation-Only Contract Reference](ingestion/aggregation-only-contract.md)**
 - **31 – [Advisory Observations & Linksets](advisories/aggregation.md)**
 - **31 – [VEX Observations & Linksets](vex/aggregation.md)**
+- **32 – [Entry-Point Detection Playbook](modules/scanner/operations/entrypoint.md)**
 - **30 – Developer Templates**  
   - [Excititor Connector Skeleton](dev/templates/excititor-connector/)
 - **11 – [Authority Service](11_AUTHORITY.md)**
 - **11 – [Data Schemas](11_DATA_SCHEMAS.md)**
 - **12 – [Performance Workbook](12_PERFORMANCE_WORKBOOK.md)**
 - **13 – [Release‑Engineering Playbook](13_RELEASE_ENGINEERING_PLAYBOOK.md)**
-- **20 – [CLI AOC Commands Reference](cli/cli-reference.md)**
+- **20 – [CLI AOC Commands Reference](modules/cli/guides/cli-reference.md)**
 - **20 – [Console CLI Parity Matrix](cli-vs-ui-parity.md)**
 - **60 – [Policy Engine Overview](policy/overview.md)**
 - **61 – [Policy DSL Grammar](policy/dsl.md)**
@@ -74,7 +75,7 @@ Everything here is open‑source and versioned — when you check out a git ta
 - **63 – [Policy Runs & Orchestration](policy/runs.md)**
 - **64 – [Policy Exception Effects](policy/exception-effects.md)**
 - **65 – [Policy Engine REST API](api/policy.md)**
-- **66 – [Policy CLI Guide](cli/policy.md)**
+- **66 – [Policy CLI Guide](modules/cli/guides/policy.md)**
 - **67 – [Policy Editor Workspace](ui/policy-editor.md)**
 - **68 – [Policy Observability](observability/policy.md)**
 - **69 – [Console Observability](observability/ui-telemetry.md)**
@@ -84,14 +85,14 @@ Everything here is open‑source and versioned — when you check out a git ta
 - **72 – [Policy FAQ](faq/policy-faq.md)**
 - **73 – [Policy Run DTOs](../src/Scheduler/__Libraries/StellaOps.Scheduler.Models/docs/SCHED-MODELS-20-001-POLICY-RUNS.md)**
 - **30 – [Fixture Maintenance](dev/fixtures.md)**
-- **74 – [Export Center Overview](export-center/overview.md)**
-- **75 – [Export Center Architecture](export-center/architecture.md)**
-- **76 – [Export Center Profiles](export-center/profiles.md)**
-- **77 – [Export Center API Reference](export-center/api.md)**
-- **78 – [Export Center CLI Guide](export-center/cli.md)**
-- **79 – [Export Center Trivy Adapters](export-center/trivy-adapter.md)**
-- **80 – [Export Center Mirror Bundles](export-center/mirror-bundles.md)**
-- **81 – [Export Center Provenance & Signing](export-center/provenance-and-signing.md)**
+- **74 – [Export Center Overview](modules/export-center/overview.md)**
+- **75 – [Export Center Architecture](modules/export-center/architecture.md)**
+- **76 – [Export Center Profiles](modules/export-center/profiles.md)**
+- **77 – [Export Center API Reference](modules/export-center/api.md)**
+- **78 – [Export Center CLI Guide](modules/export-center/cli.md)**
+- **79 – [Export Center Trivy Adapters](modules/export-center/trivy-adapter.md)**
+- **80 – [Export Center Mirror Bundles](modules/export-center/mirror-bundles.md)**
+- **81 – [Export Center Provenance & Signing](modules/export-center/provenance-and-signing.md)**
 
 ### User & operator guides
 - **14 – [Glossary](14_GLOSSARY_OF_TERMS.md)**
@@ -148,7 +149,7 @@ Everything here is open‑source and versioned — when you check out a git ta
 > Imposed rule: Work of this type or tasks of this type on this component must also be applied everywhere else it should be applied.
 
 - **Aggregation-Only Contract (AOC).** Ingestion services aggregate and link facts only—derived precedence, severity, and safe-fix hints live in Policy overlays and dedicated explorers. Review [`implplan/AGENTS.md`](implplan/AGENTS.md) and the AOC guardrails in [`aoc/aoc-guardrails.md`](aoc/aoc-guardrails.md).
-- **Cartographer owns graphs.** SBOM Service emits projections/events; Cartographer (`CARTO-GRAPH-21-00x`) builds graph storage, overlays, and tiles. See `ARCHITECTURE_CONCELIER.md` (Cartographer handshake section) for handoff boundaries.
+- **Cartographer owns graphs.** SBOM Service emits projections/events; Cartographer (`CARTO-GRAPH-21-00x`) builds graph storage, overlays, and tiles. See `modules/concelier/architecture.md` (Cartographer handshake section) for handoff boundaries.
 - **Notifier replaces legacy Notify.** Sprint‑15 `StellaOps.Notify.*` tasks are frozen; use the Notifications Studio/Notifier backlogs (`NOTIFY-SVC-38..40`, `WEB-NOTIFY-3x-00x`, `CLI-NOTIFY-3x-00x`).
 - **Dedicated services for Vuln & Policy.** Vuln Explorer work flows through `src/VulnExplorer/StellaOps.VulnExplorer.Api`/Console/CLI (Sprint 29); gateway routes proxy only. Policy Engine remains the sole source for precedence/suppression overlays.
 - **Cleanup log.** The backlog consolidation summary lives in [`backlog/2025-10-cleanup.md`](backlog/2025-10-cleanup.md).