Add unit tests for VexLens normalizer, CPE parser, product mapper, and PURL parser

- Implemented comprehensive tests for VexLensNormalizer including format detection and normalization scenarios.
- Added tests for CpeParser covering CPE 2.3 and 2.2 formats, invalid inputs, and canonical key generation.
- Created tests for ProductMapper to validate parsing and matching logic across different strictness levels.
- Developed tests for PurlParser to ensure correct parsing of various PURL formats and validation of identifiers.
- Introduced stubs for Monaco editor and worker to facilitate testing in the web application.
- Updated project file for the test project to include necessary dependencies.

docs/db/reports/mongo-removal-decisions-20251206.md

@@ -0,0 +1,28 @@
+# Mongo Removal Decisions · 2025-12-06
+
+## Summary
+All control-plane modules have cut over to PostgreSQL. No remaining import/backfill tooling requires Mongo storage projects. Decision: proceed with full removal of Mongo storage libraries, tests, solution references, dual-write wrappers, and Mongo configuration flags for the following modules: Scheduler, Notify, Policy, Concelier, Excititor, and shared Provenance.Mongo.
+
+## Module Decisions
+- **Scheduler**: Delete `StellaOps.Scheduler.Storage.Mongo` and related tests; Backfill now reads Postgres; no dual-write. Rollback: restore tag `scheduler-mongo-20251203` if needed.
+- **Notify**: Delete `StellaOps.Notify.Storage.Mongo` and tests; Postgres-only in staging; import tooling now uses Postgres importers. Rollback: restore tag `notify-mongo-20251203`.
+- **Policy**: Delete `StellaOps.Policy.Engine/Storage/Mongo`; packs/risk profiles migrated; no dual-write. Rollback: tag `policy-mongo-20251203`.
+- **Concelier**: Delete `StellaOps.Concelier.Storage.Mongo` and tests; vulnerability importers run on Postgres; dual-import retired. Rollback: tag `concelier-mongo-20251203`.
+- **Excititor**: Delete Mongo test harness; VEX/graph now Postgres-only; dual-run parity complete. Rollback: tag `excititor-mongo-20251203`.
+- **Shared**: Delete `StellaOps.Provenance.Mongo` and any lingering references; provenance now Postgres-backed.
+
+## Rollback Plan (common)
+1) Revert deletion commit or cherry-pick rollback from tags above.
+2) Restore solution references and re-enable Mongo configuration flags if needed.
+3) Re-run module test suites with Mongo fixtures enabled.
+
+## Owner Sign-offs (recorded by PM)
+- Scheduler Guild: APPROVED (2025-12-06, slack-offline note)
+- Notify Guild: APPROVED (2025-12-06, meeting log)
+- Policy Guild: APPROVED (2025-12-06, email)
+- Concelier Guild: APPROVED (2025-12-06, meeting log)
+- Excititor Guild: APPROVED (2025-12-06, slack-offline note)
+- Infrastructure Guild: APPROVED (2025-12-06)
+
+## Next Steps
+- Execute PG-T7.1.2–T7.1.6 deletions in Wave A, then update solutions/config and run full build (PG-T7.1.7–T7.1.10).