feat: add OpenTelemetry trace spans to all handlers and pipeline functions

Add #[tracing::instrument(skip_all)] to 44 functions:
- 19 API handlers in mod.rs
- 3 chat handlers, 6 DAST handlers, 7 graph handlers
- 2 pipeline orchestrator functions
- 7 scanner functions (sbom, semgrep, gitleaks, cve, lint, patterns)

This generates trace spans for SigNoz visibility into request
latency, scan pipeline stages, and error tracking.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

compliance-agent/src/pipeline/cve.rs

@@ -21,6 +21,7 @@ impl CveScanner {
         }
     }
 
+    #[tracing::instrument(skip_all)]
     pub async fn scan_dependencies(
         &self,
         repo_id: &str,