fix(iace): scan ZoneDE in domain gate (catches zone-only domain hints)

A "Splitterflug bei Werkzeugbruch" pattern leaked into a lift re-seed because
its press hint ("Pressraum") lives in ZoneDE, which applyDomainGates did not
scan. Add ZoneDE to the gated text. Leakage stays 0, ghosts 0, coverage held.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

ai-compliance-sdk/internal/iace/pattern_domain_gates.go

@@ -65,7 +65,7 @@ var domainGateTerms = map[string]string{
 func applyDomainGates(patterns []HazardPattern) []HazardPattern {
 	for i := range patterns {
 		text := normalizeGateText(patterns[i].NameDE + " " + patterns[i].ScenarioDE + " " +
-			patterns[i].TriggerDE + " " + patterns[i].HarmDE)
+			patterns[i].TriggerDE + " " + patterns[i].HarmDE + " " + patterns[i].ZoneDE)
 
 		present := make(map[string]bool, len(patterns[i].RequiredComponentTags))
 		for _, t := range patterns[i].RequiredComponentTags {