Rulepacks

Jurisdiction compliance rules as versioned data. Publishing requires a four-eyes legal sign-off; a strictest-fallback baseline always applies.