Add Authority Advisory AI and API Lifecycle Configuration

- Introduced AuthorityAdvisoryAiOptions and related classes for managing advisory AI configurations, including remote inference options and tenant-specific settings.
- Added AuthorityApiLifecycleOptions to control API lifecycle settings, including legacy OAuth endpoint configurations.
- Implemented validation and normalization methods for both advisory AI and API lifecycle options to ensure proper configuration.
- Created AuthorityNotificationsOptions and its related classes for managing notification settings, including ack tokens, webhooks, and escalation options.
- Developed IssuerDirectoryClient and related models for interacting with the issuer directory service, including caching mechanisms and HTTP client configurations.
- Added support for dependency injection through ServiceCollectionExtensions for the Issuer Directory Client.
- Updated project file to include necessary package references for the new Issuer Directory Client library.

src/Notify/StellaOps.Notify.WebService/Options/NotifyWebServiceOptions.cs

@@ -55,11 +55,13 @@ public sealed class NotifyWebServiceOptions
 
         public int TokenClockSkewSeconds { get; set; } = 60;
 
-        public IList<string> Audiences { get; set; } = new List<string> { "notify" };
-
-        public string ReadScope { get; set; } = "notify.read";
-
-        public string AdminScope { get; set; } = "notify.admin";
+        public IList<string> Audiences { get; set; } = new List<string> { "notify" };
+
+        public string ViewerScope { get; set; } = "notify.viewer";
+
+        public string OperatorScope { get; set; } = "notify.operator";
+
+        public string AdminScope { get; set; } = "notify.admin";
 
         /// <summary>
         /// Optional development signing key for symmetric JWT validation when Authority is disabled.

src/Notify/StellaOps.Notify.WebService/Options/NotifyWebServiceOptionsValidator.cs

@@ -60,9 +60,11 @@ internal static class NotifyWebServiceOptionsValidator
                 throw new InvalidOperationException("notify:authority:audiences must include at least one value.");
             }
 
-            if (string.IsNullOrWhiteSpace(authority.AdminScope) || string.IsNullOrWhiteSpace(authority.ReadScope))
-            {
-                throw new InvalidOperationException("notify:authority admin and read scopes must be configured.");
+            if (string.IsNullOrWhiteSpace(authority.AdminScope)
+                || string.IsNullOrWhiteSpace(authority.OperatorScope)
+                || string.IsNullOrWhiteSpace(authority.ViewerScope))
+            {
+                throw new InvalidOperationException("notify:authority admin, operator, and viewer scopes must be configured.");
             }
         }
         else