Initial commit: Compliance Scanner Agent

Autonomous security and compliance scanning agent for git repositories.
Features: SAST (Semgrep), SBOM (Syft), CVE monitoring (OSV.dev/NVD),
GDPR/OAuth pattern detection, LLM triage, issue creation (GitHub/GitLab/Jira),
PR reviews, and Dioxus fullstack dashboard.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

compliance-agent/src/api/server.rs

@@ -0,0 +1,28 @@
+use std::sync::Arc;
+
+use axum::Extension;
+use tower_http::cors::CorsLayer;
+use tower_http::trace::TraceLayer;
+
+use crate::agent::ComplianceAgent;
+use crate::api::routes;
+use crate::error::AgentError;
+
+pub async fn start_api_server(agent: ComplianceAgent, port: u16) -> Result<(), AgentError> {
+    let app = routes::build_router()
+        .layer(Extension(Arc::new(agent)))
+        .layer(CorsLayer::permissive())
+        .layer(TraceLayer::new_for_http());
+
+    let addr = format!("0.0.0.0:{port}");
+    let listener = tokio::net::TcpListener::bind(&addr)
+        .await
+        .map_err(|e| AgentError::Other(format!("Failed to bind to {addr}: {e}")))?;
+
+    tracing::info!("REST API listening on {addr}");
+    axum::serve(listener, app)
+        .await
+        .map_err(|e| AgentError::Other(format!("API server error: {e}")))?;
+
+    Ok(())
+}