Add enterprise compute quota governance

[yyswhsccc]

/claim #19

Summary

• adds a distinct Enterprise Tooling slice for institutional compute and storage quota governance
• evaluates lab/project GPU and storage forecasts into normal/warning/critical/blocked risk bands
• produces admin dashboard metrics, approval queue decisions, CSV quota risk register exports, export manifest targets, compliance evidence, and HMAC-signed webhook events
• adds a deterministic REST API catalog with service-token scopes for dashboard, review queue, project detail, decision, and export manifest routes
• includes synthetic sample data plus docs/demo.svg and docs/demo.mp4 for review

Demo

• Reviewer proof guide: https://github.com/yyswhsccc/SCIBASE.AI/blob/bounty-radar/issue-19-compute-quota-governance/enterprise-compute-quota-governance/docs/demo.md
• Demo video: https://github.com/yyswhsccc/SCIBASE.AI/blob/bounty-radar/issue-19-compute-quota-governance/enterprise-compute-quota-governance/docs/demo.mp4
• Static preview: https://github.com/yyswhsccc/SCIBASE.AI/blob/bounty-radar/issue-19-compute-quota-governance/enterprise-compute-quota-governance/docs/demo.svg

The video is a 40 second synthetic-data walkthrough of quota policy, usage evaluation, risk enforcement, approval queue decisions, API/export metadata, and HMAC-signed webhook evidence. docs/demo.md lists validation steps and sample output so the proof does not depend on the video alone.

Differentiation

I reviewed the existing open Issue #19 PRs (#30, #33, #69, #72, #86, #119, #127, #143, #150, #159, #161, #163, #164, #175, #176, #200, #202). Those cover broad dashboards, schema/API contracts, export pipelines, trust/compliance packets, interoperability, audit routing, webhook replay, identity drift, retention/legal hold, grant compliance, data residency, SLA monitoring, lab inventory, secret rotation, and API contract-change governance. This PR focuses specifically on compute/storage quota governance and chargeback-ready admin review workflows.

Validation

• npm run check
• npm test
• npm run demo
• git diff --check

Bounty issue: #19