Add Authority Advisory AI and API Lifecycle Configuration

- Introduced AuthorityAdvisoryAiOptions and related classes for managing advisory AI configurations, including remote inference options and tenant-specific settings.
- Added AuthorityApiLifecycleOptions to control API lifecycle settings, including legacy OAuth endpoint configurations.
- Implemented validation and normalization methods for both advisory AI and API lifecycle options to ensure proper configuration.
- Created AuthorityNotificationsOptions and its related classes for managing notification settings, including ack tokens, webhooks, and escalation options.
- Developed IssuerDirectoryClient and related models for interacting with the issuer directory service, including caching mechanisms and HTTP client configurations.
- Added support for dependency injection through ServiceCollectionExtensions for the Issuer Directory Client.
- Updated project file to include necessary package references for the new Issuer Directory Client library.

src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env/SurfaceEnvironmentSettings.cs

@@ -0,0 +1,25 @@
+using System.Collections.Generic;
+using System.Security.Cryptography.X509Certificates;
+
+namespace StellaOps.Scanner.Surface.Env;
+
+/// <summary>
+/// Snapshot of the resolved surface environment configuration for a component.
+/// </summary>
+public sealed record SurfaceEnvironmentSettings(
+    Uri SurfaceFsEndpoint,
+    string SurfaceFsBucket,
+    string? SurfaceFsRegion,
+    DirectoryInfo CacheRoot,
+    int CacheQuotaMegabytes,
+    bool PrefetchEnabled,
+    IReadOnlyCollection<string> FeatureFlags,
+    SurfaceSecretsConfiguration Secrets,
+    string Tenant,
+    SurfaceTlsConfiguration Tls)
+{
+    /// <summary>
+    /// Gets the timestamp (UTC) when the configuration snapshot was created.
+    /// </summary>
+    public DateTimeOffset CreatedAtUtc { get; init; } = DateTimeOffset.UtcNow;
+}