feat: add OpenTelemetry trace spans to all handlers and pipeline functions

Add #[tracing::instrument(skip_all)] to 44 functions:
- 19 API handlers in mod.rs
- 3 chat handlers, 6 DAST handlers, 7 graph handlers
- 2 pipeline orchestrator functions
- 7 scanner functions (sbom, semgrep, gitleaks, cve, lint, patterns)

This generates trace spans for SigNoz visibility into request
latency, scan pipeline stages, and error tracking.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

compliance-agent/src/pipeline/cve.rs

@@ -21,6 +21,7 @@ impl CveScanner {
         }
     }
 
+    #[tracing::instrument(skip_all)]
     pub async fn scan_dependencies(
         &self,
         repo_id: &str,

compliance-agent/src/pipeline/gitleaks.rs

@@ -17,6 +17,7 @@ impl Scanner for GitleaksScanner {
         ScanType::SecretDetection
     }
 
+    #[tracing::instrument(skip_all)]
     async fn scan(&self, repo_path: &Path, repo_id: &str) -> Result<ScanOutput, CoreError> {
         let output = tokio::process::Command::new("gitleaks")
             .args([

compliance-agent/src/pipeline/lint.rs

@@ -22,6 +22,7 @@ impl Scanner for LintScanner {
         ScanType::Lint
     }
 
+    #[tracing::instrument(skip_all)]
     async fn scan(&self, repo_path: &Path, repo_id: &str) -> Result<ScanOutput, CoreError> {
         let mut all_findings = Vec::new();
 

compliance-agent/src/pipeline/orchestrator.rs

@@ -50,6 +50,7 @@ impl PipelineOrchestrator {
         }
     }
 
+    #[tracing::instrument(skip_all)]
     pub async fn run(&self, repo_id: &str, trigger: ScanTrigger) -> Result<(), AgentError> {
         // Look up the repository
         let repo = self
@@ -108,6 +109,7 @@ impl PipelineOrchestrator {
         result.map(|_| ())
     }
 
+    #[tracing::instrument(skip_all)]
     async fn run_pipeline(
         &self,
         repo: &TrackedRepository,

compliance-agent/src/pipeline/patterns.rs

@@ -82,6 +82,7 @@ impl Scanner for GdprPatternScanner {
         ScanType::Gdpr
     }
 
+    #[tracing::instrument(skip_all)]
     async fn scan(&self, repo_path: &Path, repo_id: &str) -> Result<ScanOutput, CoreError> {
         let findings = scan_with_patterns(
             repo_path,
@@ -146,6 +147,7 @@ impl Scanner for OAuthPatternScanner {
         ScanType::OAuth
     }
 
+    #[tracing::instrument(skip_all)]
     async fn scan(&self, repo_path: &Path, repo_id: &str) -> Result<ScanOutput, CoreError> {
         let findings = scan_with_patterns(
             repo_path,

compliance-agent/src/pipeline/sbom.rs

@@ -15,6 +15,7 @@ impl Scanner for SbomScanner {
         ScanType::Sbom
     }
 
+    #[tracing::instrument(skip_all)]
     async fn scan(&self, repo_path: &Path, repo_id: &str) -> Result<ScanOutput, CoreError> {
         let mut entries = Vec::new();
 

compliance-agent/src/pipeline/semgrep.rs

@@ -17,6 +17,7 @@ impl Scanner for SemgrepScanner {
         ScanType::Sast
     }
 
+    #[tracing::instrument(skip_all)]
     async fn scan(&self, repo_path: &Path, repo_id: &str) -> Result<ScanOutput, CoreError> {
         let output = tokio::process::Command::new("semgrep")
             .args(["--config=auto", "--json", "--quiet"])