v2.0.0 — .NET 10 Upgrade & Security Hardening

🚀 What's New in v2.0.0

⬆️ .NET 10 LTS Upgrade

• Upgraded all projects from .NET 9 to .NET 10.0 (Long Term Support — November 2028)
• All NuGet packages aligned to .NET 10 versions
• Target framework set to net10.0-windows for proper Windows platform support
• Removed redundant packages (System.Text.Json, Microsoft.AspNetCore.SignalR 1.1.0)

🔒 Security Fixes

• Fixed JSON injection in EntraADHelper.SetExtensionAttributeValue() — replaced unsafe string interpolation with JsonObject
• Fixed index out of bounds — replaced hardcoded index[9] with validated whitelist of extension attribute names (1–15)
• Fixed OData filter injection in IntuneHelper — added EscapeODataFilterValue() for all 4 Graph API filter queries
• Fixed URL parameter injection in EntraADHelper — added Uri.EscapeDataString() for device name URL parameters
• Fixed reflection safety — extension attribute names validated against whitelist before property access
• Fixed thread-unsafe token cache — added SemaphoreSlim with double-check locking pattern in AuthenticationHandler
• Fixed resource disposal — DirectoryEntry from search results now properly disposed with using

🧹 Code Quality

• Replaced Console.WriteLine with ILogger in library code
• Fixed deprecated ConfigureHttpMessageHandlerBuilder → ConfigureAdditionalHttpMessageHandlers
• Added [SupportedOSPlatform("windows")] annotations (eliminates all CA1416 warnings)

🧪 Testing

• Added 28 unit tests covering: DN parsing, extension attribute validation, configuration defaults, notification settings
• New test project: Nimbus.ExtensionAttributes.Tests with xUnit + Moq

📚 Documentation

• Moved documentation files to docs/ folder
• Updated README with .NET 10 badges, correct build paths, and documentation links table
• Completed truncated configuration example in README

🧹 Cleanup

• Removed legacy empty folders (AD.Helper/, EntraAD.Helper/, ExtensionAttributes.Worker/, Intune.Helper/)
• Added repository description and search topics for better discoverability