[comp] Production Deploy

Merged
GI
5mo ago
+8072-28868

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

Summary by cubic

Promotes the latest MCP Server release to production. Adds multipart policy PDF upload, built‑in role obligations APIs/tools, expanded finding frameworks, and updates docs/SDK.

  • New Features

    • Multipart policy PDF upload at /v1/policies/{id}/pdf (multipart or base64). UI-only; use presigned /pdf/upload-url + /pdf/confirm for clients.
    • Built-in roles obligations: get and update endpoints with MCP tools (get-built-in-obligations, update-built-in-obligations).
    • Added finding types: PCI DSS, HIPAA, GDPR, ISO 9001, ISO 42001.

  • Refactors

    • Policy PDF delete now targets a version; defaults to latest draft; blocked for published or pending versions.
    • Clarified auth attribution for cloud security actions (session, API key, service token).
    • Added optional organizationId across several DTOs (auto-resolved/ignored by server).
    • Updated README and landing page to link the mcp-server.mcpb GitHub release.
    • Added repository metadata and package-lock.json; regenerated SDK with base error CompAiError; updated OpenAPI/manifest/tool names; removed stale generator lock.