Add services/standard_ingester.py — tags technical standards / control frameworks
(NIST / OWASP / BSI Grundschutz / CSA CCM) source_class=technical_standard /
authority_weight=80 / bindingness=best_practice / use_for_primary=false, so a
standard ranks below binding law and guidance for obligation/interpretation
questions but surfaces for "which controls/measures fit?" (control-intent, a
follow-up retriever step). Reuses the guidance_ingester extraction helpers. The
per-source license is carried on every unit so the commercial gate can refuse a
non-commercial source (e.g. CSA CCM = CC-BY-NC).
Tested: 3 unit tests on the metadata path, ruff + mypy clean.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>