Guardrail tiers

Four enterprise security enforcement levels: Starter (awareness), Standard (review gates), Strict (approval flows), Regulated (full audit).