refactor: modularize codebase and add 404 unit tests

Split large files into focused modules across all crates while
maintaining API compatibility via re-exports. Add comprehensive
unit tests covering core models, pipeline parsers, LLM triage,
DAST security tools, graph algorithms, and MCP parameter validation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fuzz/Cargo.toml

@@ -0,0 +1,16 @@
+[package]
+name = "compliance-fuzz"
+version = "0.0.0"
+publish = false
+edition = "2021"
+
+[dependencies]
+libfuzzer-sys = "0.4"
+compliance-core = { path = "../compliance-core" }
+
+# Fuzz targets are defined below. Add new targets as [[bin]] entries.
+
+[[bin]]
+name = "fuzz_finding_dedup"
+path = "fuzz_targets/fuzz_finding_dedup.rs"
+doc = false

fuzz/fuzz_targets/fuzz_finding_dedup.rs

@@ -0,0 +1,12 @@
+#![no_main]
+use libfuzzer_sys::fuzz_target;
+
+// Example fuzz target stub for finding deduplication logic.
+// Replace with actual dedup function calls once ready.
+
+fuzz_target!(|data: &[u8]| {
+    if let Ok(s) = std::str::from_utf8(data) {
+        // TODO: Call dedup/fingerprint functions with fuzzed input
+        let _ = s.len();
+    }
+});