Compliance Guardrails

Create a CI/CD compliance step that scans code for PII patterns, checks dependency licenses against a whitelist, and blocks deployment if violations are found.