feat(scripts): add emit-all orchestrator + initial compliance artifacts

Adds scripts/compliance/emit-all.mjs which runs all three compliance
emitters in --check mode and exits non-zero if any artifact is stale.
Adds compliance:emit-all root package script.

Generates initial compliance/retention-policy.yml and
compliance/sub-processors.yml from the template collections.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

compliance/retention-policy.yml

@@ -0,0 +1,32 @@
+# compliance/retention-policy.yml — Collection retention schedules
+# Generated by scripts/compliance/emit-retention-policy.mjs — do not edit manually.
+# Run `pnpm compliance:retention-policy` to regenerate.
+collections:
+  articles:
+    postDeletion:
+      action: hard-delete
+      duration: P90D
+      trigger: after-deletion
+    purgeSchedule: monthly
+    slug: articles
+  media:
+    postDeletion:
+      action: hard-delete
+      duration: P90D
+      trigger: after-deletion
+    purgeSchedule: monthly
+    slug: media
+  pages:
+    postDeletion:
+      action: hard-delete
+      duration: P90D
+      trigger: after-deletion
+    purgeSchedule: monthly
+    slug: pages
+  users:
+    postDeletion:
+      action: hard-delete
+      duration: P30D
+      trigger: after-deletion
+    purgeSchedule: daily
+    slug: users