feat(bindings)!: add RVM/Program support across FFI and language bindings (#565)

- FFI: add RVM/Program APIs, execution state accessors, HostAwait handling, and buffer/result helpers in rvm.rs, common.rs, engine.rs.
- Compiler: emit HostAwait for __builtin_host_await in function_calls.rs.
- RVM tests: add HostAwait regression cases and extend harness for suspend/resume responses in host_await.yaml and mod.rs.
- C/C++: add RVM tests/examples and wrapper updates in rvm_tests.c, rvm_tests.cpp, regorus.hpp, plus CMake wiring.
- C#: add Program/Rvm bindings, SafeHandle/PInvoke, tests, and example usage in Regorus, RvmProgramTests.cs, Program.cs, and README updates.
- Go: add Program/Rvm bindings, tests, and examples in rvm.go, rvm_test.go, main.go.
- Java: add Program/Rvm bindings, JNI glue, and examples in lib.rs, regorus, Test.java.
- Python: add Program/Rvm bindings and examples in lib.rs, test.py.
- WASM: add Program/Rvm bindings and examples in lib.rs, test.js.
- Tooling: wire binding tests in xtask and ignore generated Java artifacts in .gitignore.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

bindings/wasm/test.js

@@ -85,3 +85,78 @@ console.log(report);
 // Print pretty report.
 report = engine.getCoverageReportPretty();
 console.log(report);
+
+// RVM regular example
+{
+const policy = `
+package demo
+import rego.v1
+
+default allow := false
+
+allow if {
+  input.user == "alice"
+  input.active == true
+}
+`;
+
+const modules = JSON.stringify([
+  { id: "demo.rego", content: policy }
+]);
+const entryPoints = JSON.stringify(["data.demo.allow"]);
+
+const program = regorus.Program.compileFromModules(
+  "{}",
+  modules,
+  entryPoints
+);
+
+console.log(program.generateListing());
+
+const binary = program.serializeBinary();
+const deserialized = regorus.Program.deserializeBinary(binary);
+if (deserialized.isPartial) {
+  throw new Error("Deserialized program marked partial");
+}
+const rehydrated = deserialized.program();
+
+const vm = new regorus.Rvm();
+vm.loadProgram(rehydrated);
+vm.setInputJson('{"user":"alice","active":true}');
+console.log(vm.execute());
+}
+
+// RVM HostAwait example
+{
+const policy = `
+package demo
+import rego.v1
+
+default allow := false
+
+allow if {
+  input.account.active == true
+  details := __builtin_host_await(input.account.id, "account")
+  details.tier == "gold"
+}
+`;
+
+const modules = JSON.stringify([
+  { id: "await.rego", content: policy }
+]);
+const entryPoints = JSON.stringify(["data.demo.allow"]);
+
+const program = regorus.Program.compileFromModules(
+  "{}",
+  modules,
+  entryPoints
+);
+
+const vm = new regorus.Rvm();
+vm.setExecutionMode(1);
+vm.loadProgram(program);
+vm.setInputJson('{"account":{"id":"acct-1","active":true}}');
+vm.execute();
+console.log(vm.getExecutionState());
+console.log(vm.resume('{"tier":"gold"}'));
+}