feat(compliance): add content compliance detection across tenant, ops, and clients

Implements the Revision 8/9 compliance design: tenant + ops backends, ops-web
content-safety pages, admin-web editor/publish gate integration, desktop publish
block surfacing, and supporting migrations / shared types / config plumbing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

pnpm-lock.yaml

@@ -257,6 +257,9 @@ importers:
       '@ant-design/icons-vue':
         specifier: ^7.0.1
         version: 7.0.1(vue@3.5.31(typescript@5.9.3))
+      '@geo/shared-types':
+        specifier: workspace:*
+        version: link:../../packages/shared-types
       '@tanstack/vue-query':
         specifier: ^5.96.0
         version: 5.96.0(vue@3.5.31(typescript@5.9.3))