[comp] Production Deploy

Merged
GI
4mo ago
+298-139

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

Summary by cubic

Deploys trust portal controls and reliability fixes: adds a questionnaire visibility toggle, unifies and expands vendor badges with a shared mapper (fixes CS-688), stabilizes cloud‑security scan results, improves task suggestions, and aligns access link expiry with grant duration.

  • New Features

    • Security Questionnaire visibility toggle for the public trust portal (defaults on). Admin: PUT /v1/trust-portal/settings/security-questionnaire. Public: GET /v1/trust-access/:friendlyUrl/security-questionnaire. UI tab added in Trust Portal settings.
    • Vendor badges now derive on-the-fly from verified certifications and override stale stored sets; admin and public share one mapper. Examples: “ISO/IEC 27001:2022” → iso27001; spelled‑out PCI DSS recognized; restored mappings for soc3, pipeda, and ccpa.

  • Bug Fixes

    • Risk treatment suggestions (CS-681): filter to live tasks before slicing/rerank and prune orphan task vectors from @upstash/vector (cursor‑paginated, resilient deletes; legacy vectors supported). Prevents “0 tasks” when relevant tasks exist.
    • Cloud Security scans (CS-702): latest run now scoped to *-security-scan checkIds so per‑task runs no longer shadow full scans.
    • Trust portal access (CS-677): access links now expire with the grant, not after 24h; email copy updated.
    • Assignees (CS-469): hide inactive users and sort the assignee list alphabetically.