feat:Add DAST audit command and related functionality

[ankit2995]

Note: This PR will be merged into feat/v3.x/aviator/26.4

This PR adds DAST auditing support to FCLI, allowing teams to audit WebInspect findings with Fortify Aviator and upload the updated DAST FPR to SSC.

What changed

• Added a new DAST audit command:
  • fcli aviator ssc audit-dast
• Downloads the latest DAST FPR from an SSC application version.
• Parses eligible WebInspect findings and submits them to Fortify Aviator.
• Writes audit decisions back to audit.xml.
• Uploads the updated FPR through the SSC artifact API.
• Returns the newly created SSC artifact ID.
• Added configurable DAST tag mapping.
• Added resilient gRPC streaming with automatic reconnection.
• Requeues only unfinished findings after a connection failure.
• Added tests for parsing, request/response mapping, FPR updates, output, and retries.

Behavior

• Eligible DAST findings are streamed to Fortify Aviator for auditing.
• Completed findings are retained if the stream reconnects.
• Skipped and failed findings are reported separately.
• The output includes:
  • application version ID
  • application and version names
  • uploaded artifact ID
  • audit status

Command

fcli aviator ssc audit-dast  --av <ssc-application>:<version> --app <aviator-application>

A custom tag mapping can be supplied with:

fcli aviator ssc audit-dast --av <ssc-application>:<version> --app <aviator-application> --tag-mapping <file>

Example Response

{
  "id": "42",
  "applicationName": "WebGoat",
  "versionName": "1.0",
  "artifactId": "2786",
  "operation": {
    "audit": {
      "submitted": 6,
      "succeeded": 4,
      "skipped": 2,
      "failed": 0
    }
  },
  "__action__": "PARTIALLY_AUDITED"
}