Add Authority Advisory AI and API Lifecycle Configuration

- Introduced AuthorityAdvisoryAiOptions and related classes for managing advisory AI configurations, including remote inference options and tenant-specific settings.
- Added AuthorityApiLifecycleOptions to control API lifecycle settings, including legacy OAuth endpoint configurations.
- Implemented validation and normalization methods for both advisory AI and API lifecycle options to ensure proper configuration.
- Created AuthorityNotificationsOptions and its related classes for managing notification settings, including ack tokens, webhooks, and escalation options.
- Developed IssuerDirectoryClient and related models for interacting with the issuer directory service, including caching mechanisms and HTTP client configurations.
- Added support for dependency injection through ServiceCollectionExtensions for the Issuer Directory Client.
- Updated project file to include necessary package references for the new Issuer Directory Client library.

src/Scanner/__Tests/StellaOps.Scanner.Surface.Validation.Tests/StellaOps.Scanner.Surface.Validation.Tests.csproj

@@ -0,0 +1,18 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <LangVersion>preview</LangVersion>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
+    <IsPackable>false</IsPackable>
+    <OutputType>Exe</OutputType>
+  </PropertyGroup>
+  <ItemGroup>
+    <ProjectReference Include="../../__Libraries/StellaOps.Scanner.Surface.Env/StellaOps.Scanner.Surface.Env.csproj" />
+    <ProjectReference Include="../../__Libraries/StellaOps.Scanner.Surface.Validation/StellaOps.Scanner.Surface.Validation.csproj" />
+  </ItemGroup>
+  <ItemGroup>
+    <Using Include="Xunit" />
+  </ItemGroup>
+</Project>

src/Scanner/__Tests/StellaOps.Scanner.Surface.Validation.Tests/SurfaceValidatorRunnerTests.cs

@@ -0,0 +1,87 @@
+using System;
+using System.IO;
+using System.Threading.Tasks;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.Extensions.Options;
+using StellaOps.Scanner.Surface.Env;
+using StellaOps.Scanner.Surface.Validation;
+
+namespace StellaOps.Scanner.Surface.Validation.Tests;
+
+public sealed class SurfaceValidatorRunnerTests
+{
+    [Fact]
+    public async Task EnsureAsync_Throws_WhenValidationFails()
+    {
+        var services = CreateServices(services =>
+        {
+            services.Configure<SurfaceValidationOptions>(options =>
+            {
+                options.ThrowOnFailure = true;
+                options.ContinueOnError = false;
+            });
+        });
+
+        var runner = services.GetRequiredService<ISurfaceValidatorRunner>();
+        var environment = new SurfaceEnvironmentSettings(
+            new Uri("https://surface.invalid"),
+            string.Empty,
+            null,
+            new DirectoryInfo(Path.Combine(Path.GetTempPath(), "stellaops-tests", Guid.NewGuid().ToString())),
+            0,
+            false,
+            Array.Empty<string>(),
+            new SurfaceSecretsConfiguration("kubernetes", "", null, null, null, false),
+            string.Empty,
+            new SurfaceTlsConfiguration(null, null, null));
+
+        var context = SurfaceValidationContext.Create(services, "TestComponent", environment);
+
+        await Assert.ThrowsAsync<SurfaceValidationException>(() => runner.EnsureAsync(context));
+    }
+
+    [Fact]
+    public async Task RunAllAsync_ReturnsSuccess_ForValidConfiguration()
+    {
+        var directory = new DirectoryInfo(Path.Combine(Path.GetTempPath(), "stellaops-tests", Guid.NewGuid().ToString()))
+        {
+            Attributes = FileAttributes.Normal
+        };
+
+        var environment = new SurfaceEnvironmentSettings(
+            new Uri("https://surface.example.com"),
+            "surface-cache",
+            null,
+            directory,
+            1024,
+            false,
+            Array.Empty<string>(),
+            new SurfaceSecretsConfiguration("kubernetes", "tenant-a", null, "stellaops", null, false),
+            "tenant-a",
+            new SurfaceTlsConfiguration(null, null, null));
+
+        var services = CreateServices();
+        var runner = services.GetRequiredService<ISurfaceValidatorRunner>();
+        var context = SurfaceValidationContext.Create(services, "TestComponent", environment);
+
+        var result = await runner.RunAllAsync(context);
+
+        Assert.True(result.IsSuccess);
+    }
+
+    private static ServiceProvider CreateServices(Action<IServiceCollection>? configure = null)
+    {
+        var services = new ServiceCollection();
+        services.AddSingleton<ILogger<LoggingSurfaceValidationReporter>>(_ => NullLogger<LoggingSurfaceValidationReporter>.Instance);
+        services.AddSingleton<ILogger<SurfaceValidatorRunner>>(_ => NullLogger<SurfaceValidatorRunner>.Instance);
+        services.AddOptions();
+        services.AddSurfaceValidation();
+
+        configure?.Invoke(services);
+
+        return services.BuildServiceProvider();
+    }
+}
+