feat(core, native, security): introduce security suite and major core enhancements and bug fixes (#104)

This major update introduces a comprehensive security suite for audio content protection and identification, alongside significant core engine enhancements and improved NativeAOT compatibility.

### Security Suite

-   Content Encryption: Implements seekable AES-256-CTR stream encryption within a new secure audio container format (`.sfa`), supporting embedded digital signatures.
-   Digital Signatures: Adds ECDSA-P384 signing and verification for files and streams. Project files (`.sfproj`) and secure audio containers can now be signed to ensure integrity and authenticity.
-   Audio Watermarking:
    -   Robust (Ownership): Embeds inaudible data using Direct-Sequence Spread Spectrum (DSSS) that can survive common attacks like re-encoding or volume changes. Includes a `WatermarkTuner` to find optimal settings.
    -   Fragile (Integrity): Embeds a fragile watermark using block-chained LSB hashing to detect tampering.
-   Acoustic Fingerprinting: Implements audio identification by generating robust fingerprints from spectral peaks. Includes an `IFingerprintStore` interface for database integration.

### Core Enhancements

-   Time-Stretching: The WSOLA time-stretcher is now fully configurable with quality presets (Fast, Balanced, HighQuality, Audiophile), allowing a trade-off between performance and audio fidelity.
-   NativeAOT Compatibility: Introduces a `TypeRegistry` and a source-generated `SoundFlowJsonContext` to ensure custom modifiers and other types are not trimmed by the AOT compiler.
-   Codec & API Improvements:
    -   The native FFmpeg wrapper now uses a FIFO buffer for more robust encoding and links against the LAME library for high-quality MP3 output.
    -   The `Recorder` API now uses the `Result` pattern for better error handling and integrates directly with digital signing.
    -   The logging system now uses a `LogEntry` struct for improved performance and structured data.

### Build, Samples & Docs

-   Build: Adds static linking of the LAME MP3 encoder library to the FFmpeg codec. CI runners have been updated.
-   Samples: Adds six new high-quality sample projects demonstrating all new security features. The `SimplePlayer` sample has been completely refactored for clarity.
-   Documentation: Adds `CITATION.cff` for academic use, `SOUNDFLOW-THIRD-PARTY-NOTICES.txt` for license compliance, and significantly updates the main README.

BREAKING CHANGE:

-   The `Log.OnLog` event signature has changed from `Action<LogLevel, string>` to `Action<LogEntry>`. Subscribers must be updated to handle the new `LogEntry` struct.
-   The `Filter.FilterType` enum has been moved to a global `SoundFlow.Enums.FilterType`. Code using the old nested enum must be updated.
-   Methods on the `Recorder` component, such as `StartRecording` and `StopRecordingAsync`, now return `Result` or `Task<Result>` instead of `void` or `Task`. Callers must now handle the returned result object.

Author: LSXPrime

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -80,7 +80,7 @@ body:
         ```csharp
         // Your MRE code here
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 
@@ -93,7 +93,7 @@ body:
         ```
         (Paste full error message and stack trace here)
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 

.github/ISSUE_TEMPLATE/documentation_issue.yaml

@@ -87,7 +87,7 @@ body:
         ```csharp
         // Improved code example
         ```
-      render: shell
+      render: markdown
     validations:
       required: false
 

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -65,7 +65,7 @@ body:
         // public class NewComponent : SoundComponent { ... }
         // public void ExistingComponent.NewMethod(ParameterType param) { ... }
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 

.github/ISSUE_TEMPLATE/performance_issue.yaml

@@ -77,7 +77,7 @@ body:
         ```csharp
         // Your MRE code here
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 
@@ -91,7 +91,7 @@ body:
         *   Exported profiling sessions (if shareable).
         *   Key findings from the profiler.
       placeholder: Paste profiling data, links, or key findings here.
-      render: shell
+      render: markdown
     validations:
       required: false
 

.github/ISSUE_TEMPLATE/platform_specific_issue.yaml

@@ -125,7 +125,7 @@ body:
         ```csharp
         // Your MRE code here
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 
@@ -137,7 +137,7 @@ body:
         ```
         (Paste full error message and stack trace here)
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 

.github/ISSUE_TEMPLATE/question.yaml

@@ -58,7 +58,7 @@ body:
         ```csharp
         // Your code here
         ```
-      render: shell
+      render: csharp
     validations:
       required: false
 

.github/ISSUE_TEMPLATE/security_vulnerability_report.yaml

@@ -71,7 +71,7 @@ body:
         ```csharp
         // PoC code (if safe to share publicly)
         ```
-      render: shell
+      render: markdown
     validations:
       required: false
 

.github/workflows/build-extensions-apm.yml

@@ -48,7 +48,7 @@ jobs:
             cross_file: "linux-arm64.crossfile"
 
           # macOS builds
-          - os: macos-latest
+          - os: macos-15-intel
             rid: osx-x64
             platform: macOS
             arch: x86_64

.github/workflows/build-ffmpeg.yml

@@ -162,7 +162,7 @@ jobs:
       matrix:
         include:
           - arch: x64
-            os: macos-13
+            os: macos-15-intel
             cmake_arch: x86_64
           - arch: arm64
             os: macos-14

.github/workflows/build-miniaudio.yml

@@ -160,14 +160,13 @@ jobs:
             lib_extension: ".dll"
             toolchain: "Visual Studio 17 2022"
 
-          # Disabled due to https://github.com/mackron/miniaudio/issues/1045
-          #- os: windows-latest
-          #  rid: win-arm64
-          #  platform: Windows
-          #  arch: ARM64
-          #  cmake_target_arch: ARM64
-          #  lib_extension: ".dll"
-          #  toolchain: "Visual Studio 17 2022"
+          - os: windows-latest
+            rid: win-arm64
+            platform: Windows
+            arch: ARM64
+            cmake_target_arch: ARM64
+            lib_extension: ".dll"
+            toolchain: "Visual Studio 17 2022"
 
           # Linux builds
           - os: ubuntu-22.04
@@ -199,7 +198,7 @@ jobs:
             cmake_target_arch: arm64
             lib_extension: ".dylib"
 
-          - os: macos-latest
+          - os: macos-15-intel
             rid: osx-x64
             platform: macOS
             arch: x86_64