feat: findings refinement, new scanners, and deployment tooling (#6)

compliance-core/src/models/repository.rs

@@ -28,17 +28,23 @@ pub struct TrackedRepository {
     pub tracker_type: Option<TrackerType>,
     pub tracker_owner: Option<String>,
     pub tracker_repo: Option<String>,
+    /// Optional auth token for HTTPS private repos (PAT or password)
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub auth_token: Option<String>,
+    /// Optional username for HTTPS auth (defaults to "x-access-token" for PATs)
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub auth_username: Option<String>,
     pub last_scanned_commit: Option<String>,
     #[serde(default, deserialize_with = "deserialize_findings_count")]
     pub findings_count: u32,
     #[serde(
         default = "chrono::Utc::now",
-        deserialize_with = "deserialize_datetime"
+        with = "super::serde_helpers::bson_datetime"
     )]
     pub created_at: DateTime<Utc>,
     #[serde(
         default = "chrono::Utc::now",
-        deserialize_with = "deserialize_datetime"
+        with = "super::serde_helpers::bson_datetime"
     )]
     pub updated_at: DateTime<Utc>,
 }
@@ -47,23 +53,6 @@ fn default_branch() -> String {
     "main".to_string()
 }
 
-/// Handles findings_count stored as either a plain integer or a BSON Int64
-/// which the driver may present as a map `{"low": N, "high": N, "unsigned": bool}`.
-/// Handles datetime stored as either a BSON DateTime or an RFC 3339 string.
-fn deserialize_datetime<'de, D>(deserializer: D) -> Result<DateTime<Utc>, D::Error>
-where
-    D: Deserializer<'de>,
-{
-    let bson = bson::Bson::deserialize(deserializer)?;
-    match bson {
-        bson::Bson::DateTime(dt) => Ok(dt.into()),
-        bson::Bson::String(s) => s.parse::<DateTime<Utc>>().map_err(serde::de::Error::custom),
-        other => Err(serde::de::Error::custom(format!(
-            "expected DateTime or string, got: {other:?}"
-        ))),
-    }
-}
-
 fn deserialize_findings_count<'de, D>(deserializer: D) -> Result<u32, D::Error>
 where
     D: Deserializer<'de>,
@@ -87,6 +76,8 @@ impl TrackedRepository {
             default_branch: "main".to_string(),
             local_path: None,
             scan_schedule: None,
+            auth_token: None,
+            auth_username: None,
             webhook_enabled: false,
             tracker_type: None,
             tracker_owner: None,