feat(questions): make brand questions the primary monitoring & template axis

- add /questions/combination-fill endpoint with AI-driven, IP-region-aware matrix fill
- extract ip2region resolver from ops/app into shared/ipregion for cross-service use
- thread question_id filter through dashboard composite, citation summary, and collect-now
- switch template wizard from keyword inputs to brand-question selection (primary + supplemental)
- pass brand_question and supplemental_questions through assist/title/outline prompts
- add AiWaitingModal + 45s client timeout and request_timeout error mapping for long AI flows

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

server/internal/ops/app/audit.go

@@ -7,19 +7,20 @@ import (
 
 	"github.com/geo-platform/tenant-api/internal/ops/domain"
 	"github.com/geo-platform/tenant-api/internal/ops/repository"
+	"github.com/geo-platform/tenant-api/internal/shared/ipregion"
 )
 
 type AuditService struct {
 	repo      *repository.AuditRepository
 	logger    *zap.Logger
-	ipRegions *IPRegionResolver
+	ipRegions *ipregion.Resolver
 }
 
 func NewAuditService(repo *repository.AuditRepository, logger *zap.Logger) *AuditService {
 	return &AuditService{repo: repo, logger: logger}
 }
 
-func (s *AuditService) WithIPRegionResolver(resolver *IPRegionResolver) *AuditService {
+func (s *AuditService) WithIPRegionResolver(resolver *ipregion.Resolver) *AuditService {
 	s.ipRegions = resolver
 	return s
 }