feat(compliance): add case management with rest

[tiana-code]

E-04 Compliance #268 - the case-management vertical, mirroring the KYC vertical.

What

• ComplianceCaseService (interface+impl, @transactional in impl only): open (OPEN), get, claim (OPEN->CLAIMED), resolve (->RESOLVED), escalate (->ESCALATED), list(status) - all through the domain transitionTo guard; repository + a pure ComplianceCasePersistenceAdapter (value-class id<->UUID), same shape as KycServiceImpl.
• CaseController (/v1/compliance/cases): POST open (compliance:write, 201+Location), GET ?status= (read, bounded - status required), GET /{id}, POST /{id}/claim|resolve|escalate (write). Thin; String path -> ComplianceCaseId.fromString; hand CaseApiMapper.
• SecurityConfig: adds GET /v1/compliance/** = compliance:read, mutating = compliance:write (after the KYC rules, before anyRequest - fails closed).
• ProblemType / GlobalExceptionHandler: KYC_CONFLICT -> COMPLIANCE_CONFLICT (the domain exception is shared by KYC + cases; same 409), added CASE_NOT_FOUND (404) and a MethodArgumentTypeMismatchException handler so a bad ?status= returns 400 (was 500).

Decisions (umbrella drift documented)

Domain CaseStatus (CLAIMED) wins over the OpenAPI IN_REVIEW; cursor pagination, decision/reason capture and alert/payment/kyc links are deferred follow-ups. Idempotency-Key on open is deferred (consistent with KYC #277).

Gate chain

• critic: GO-WITH-CHANGES (atomic ProblemType rename keeping KYC_NOT_FOUND; CaseControllerTest scope-order assertions - applied).
• security-auditor (opus): PASS - authz fails-closed (401/403 asserted, no fall-through), §5.3 clean, rename keeps 409, list bounded.
• code-reviewer: the bad-status 500->400 fix + value-class test robustness adopted; the adapter-as-port HIGH declined with evidence (mirrors merged KycServiceImpl/PaymentServiceImpl; store-port rejected in F-04.5 KYC orchestration service + REST #265).
• evaluator: PASS (0.86).
  All local gates green (@WebMvcTest + @DataJpaTest slice-scoped; the KYC F-04.5b KYC REST + security + OpenAPI #275 tests stayed green after the rename).

Closes #268