refactor(compliance-sdk): split client/provider/embed/state under 500 LOC

Phase 4 continuation. All touched files now under the file-size cap, and
drive-by fixes unblock the types/core/react/vanilla builds which were broken
at baseline.

Splits
- packages/types/src/state 505 -> 31 LOC barrel + state-flow/-assessment/-core
- packages/core/src/client 521 -> 395 LOC + client-http 187 LOC (HTTP transport)
- packages/react/src/provider 539 -> 460 LOC + provider-context 101 LOC
- packages/vanilla/src/embed 611 -> 290 LOC + embed-banner 321 + embed-translations 78

Drive-by fixes (pre-existing typecheck/build failures)
- types/rag.ts: rename colliding LegalDocument export to RagLegalDocument
  (the `export *` chain in index.ts was ambiguous; two consumers updated
  - core/modules/rag.ts drops unused import, vue/composables/useRAG.ts
  switches to the renamed symbol).
- core/modules/rag.ts: wrap client searchRAG response to add the missing
  `query` field so the declared SearchResponse return type is satisfied.
- react/provider.tsx: re-export useCompliance so ComplianceDashboard /
  ConsentBanner / DSRPortal legacy `from '../provider'` imports resolve.
- vanilla/embed.ts + web-components/base.ts: default tenantId to ''
  so ComplianceClient construction typechecks.
- vanilla/web-components/consent-banner.ts: tighten categories literal to
  `as const` so t.categories indexing narrows correctly.

Verification: packages/types + core + react + vanilla all `pnpm build`
clean with DTS emission. consent-sdk unaffected (still green).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

breakpilot-compliance-sdk/packages/vanilla/src/web-components/base.ts

@@ -37,7 +37,7 @@ export abstract class BreakPilotElement extends HTMLElement {
     const apiKey = this.getAttribute('api-key')
     const apiEndpoint =
       this.getAttribute('api-endpoint') || 'https://compliance.breakpilot.app/api/v1'
-    const tenantId = this.getAttribute('tenant-id') || undefined
+    const tenantId = this.getAttribute('tenant-id') || ''
 
     if (apiKey) {
       this.client = new ComplianceClient({

breakpilot-compliance-sdk/packages/vanilla/src/web-components/consent-banner.ts

@@ -324,7 +324,7 @@ export class ConsentBannerElement extends BreakPilotElement {
 
   private renderSettings(styles: string): void {
     const t = this.t
-    const categories: ConsentPurpose[] = ['ESSENTIAL', 'FUNCTIONAL', 'ANALYTICS', 'MARKETING']
+    const categories = ['ESSENTIAL', 'FUNCTIONAL', 'ANALYTICS', 'MARKETING'] as const
 
     const categoriesHtml = categories
       .map(