feat(scanner): Complete PoE implementation with Windows compatibility fix

- Fix namespace conflicts (Subgraph → PoESubgraph)
- Add hash sanitization for Windows filesystem (colon → underscore)
- Update all test mocks to use It.IsAny<>()
- Add direct orchestrator unit tests
- All 8 PoE tests now passing (100% success rate)
- Complete SPRINT_3500_0001_0001 documentation

Fixes compilation errors and Windows filesystem compatibility issues.
Tests: 8/8 passing
Files: 8 modified, 1 new test, 1 completion report

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

src/Authority/StellaOps.Authority/AGENTS.md

@@ -12,6 +12,7 @@ Own the StellaOps Authority host service: ASP.NET minimal API, OpenIddict flows,
 - Use `StellaOps.Cryptography` abstractions for any crypto operations.
 - Every change updates `TASKS.md` and related docs/tests.
 - Coordinate with plugin teams before altering plugin-facing contracts.
+- Keep Console admin endpoints (`/console/admin/*`) DPoP-safe and aligned with `authority:*` scopes.
 
 ## Key Directories
 - `src/Authority/StellaOps.Authority/` — host app
@@ -22,6 +23,8 @@ Own the StellaOps Authority host service: ASP.NET minimal API, OpenIddict flows,
 ## Required Reading
 - `docs/modules/authority/architecture.md`
 - `docs/modules/platform/architecture-overview.md`
+- `docs/architecture/console-admin-rbac.md`
+- `docs/architecture/console-branding.md`
 
 ## Working Agreement
 - 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.