feat(compliance): add the aml copilot and automated suspension ports

[tiana-code]

E-04 Compliance #269 - two interface-only clean-room plug-in ports.

What

• AmlCopilot (application/copilot): assist(CopilotRequest): CopilotResponse - an out-of-tree LLM assistant for AML case work. The contract is generative/non-deterministic and the response is advisory guidance for a human reviewer, never authoritative; the port encodes no business prompt. AmlCopilotException for technical failures.
• AutomatedSuspensionPort (application/suspension): requestSuspension(SuspensionRequest): SuspensionResult (method name avoids the Kotlin suspend keyword) - suspends a subject on a caller-decided signal; the port encodes no rule for what the signal is (§5.1). Sealed result Suspended / AlreadySuspended (idempotent replay, first-class) / Rejected (business refusal); AutomatedSuspensionException for technical failures.
• Opaque references (reuse KycSession.MAX_SUBJECT_REFERENCE_LENGTH), generic context/reason, no PII. Reflection contract tests for both ports + all result variants + request guards.

Clean-room (§5.2/§5.3)

No real LLM prompts/templates, AML rules/thresholds, provider names, or PII. Distinct from RuleSynthesizer (#174, decision-engine) - that synthesizes DSL; this assists a reviewer.

Gate chain

• critic: GO-WITH-CHANGES (AlreadySuspended idempotency variant + Rejected KDoc; caseReference bound KDoc; public MAX_REASON_LENGTH - all applied).
• security-auditor (opus): PASS - clean-room clean, advisory framing satisfied, generic suspension, 4/4 ACs.
• code-reviewer: APPROVED (1 LOW applied: symbolic length const in the copilot test).
• evaluator: PASS (0.93).
  All local gates green; interface-only (no impl/Spring/LLM), application/** so domain jacoco gate unaffected.

Closes #269