feat(scan): add test metadata support

[abright25]

PR adds testMetadata field into sectester, which is required to run Broken Access Control test.

Format of metadata is based on existing data passing to backend on scan start:

    "tests": ["broken_access_control"],
    "testMetadata": {
      "broken_access_control": {
        "authObjectId": [null, "xxxxx"]
      }
    },

Sectester serves as a proxy and does not impose any additional constraints on value formats. It follows the implementation described in #259
as an example. Any format-related errors are expected to be reported by backend responses; therefore, no changes in Sectester are required if the format changes.

[Copilot]

Pull request overview

This PR adds support for test-specific metadata through a new testMetadata field, enabling the Broken Access Control test to receive required configuration data. The implementation follows the existing pattern established by starMetadata, ensuring consistency across the codebase.

• Introduces testMetadata field as an optional Record<string, unknown> type
• Updates all relevant interfaces and classes to support the new field
• Maintains the proxy pattern where format validation is handled by the backend

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
packages/scan/src/models/ScanConfig.ts	Adds testMetadata field to the ScanConfig interface
packages/scan/src/ScanSettings.ts	Implements getter/setter for testMetadata and includes it in constructor initialization
packages/scan/src/ScanFactory.ts	Passes testMetadata through to the scan configuration
packages/runner/src/lib/SecScanOptions.ts	Exposes testMetadata as part of the public SecScanOptions type

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Missing test coverage for the new testMetadata field. Following the pattern established for starMetadata in ScanFactory.spec.ts (lines 136-158), a similar test should be added to verify that testMetadata is properly passed through when provided to the scan configuration.