✨ Add Netlify functions for 8 compliance dashboards (#16215)

* 🐛 Add Netlify function backends for 8 compliance dashboards

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* ✨ Fix compliance dashboard Netlify handlers

Replace the incomplete compliance Netlify implementation with 23 static demo
handlers that follow the identity dashboard pattern, rename the ERM handlers to
match the production endpoint mapping, remove the unused compliance demo helper,
and update redirects for all production routes.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* 🌱 Add comprehensive tests for 23 compliance Netlify functions

Adds test coverage for all 23 compliance dashboard Netlify functions added in
PR #16215. Tests validate:
- Happy path: 200 responses with correct data shape validation
- CORS preflight: OPTIONS returns 204 with proper headers
- Invalid cluster parameter: 400 error response
- Unsupported HTTP methods: 405 with Allow header
- Upstream/serialization errors: 502 when JSON.stringify fails
- Security: No forbidden identity fields (secrets, tokens) in responses

Functions tested:
- SIEM: events, alerts, summary (3 functions)
- Incidents: incidents, metrics, playbooks (3 functions)
- Threat Intel: feeds, iocs, summary (3 functions)
- Risk Matrix: risks, heatmap, summary (3 functions)
- Risk Register: risks, categories, summary (3 functions)
- Risk Appetite: thresholds, kris, summary (3 functions)
- SBOM: documents, summary (2 functions)
- Licenses: packages, categories, summary (3 functions)

All 177 tests pass, covering 23 functions with 93 test cases.

Fixes #16215

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

---------

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: 3 people

netlify.toml

@@ -206,6 +206,129 @@
   to = "/.netlify/functions/identity-sessions-policies"
   status = 200
 
+# Compliance SIEM API — proxy to Netlify Functions (enterprise SIEM dashboard)
+[[redirects]]
+  from = "/api/v1/compliance/siem/events"
+  to = "/.netlify/functions/compliance-siem-events"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/siem/alerts"
+  to = "/.netlify/functions/compliance-siem-alerts"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/siem/summary"
+  to = "/.netlify/functions/compliance-siem-summary"
+  status = 200
+
+# Compliance Incident Response API — proxy to Netlify Functions (enterprise incident response dashboard)
+[[redirects]]
+  from = "/api/v1/compliance/incidents"
+  to = "/.netlify/functions/compliance-incidents"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/incidents/metrics"
+  to = "/.netlify/functions/compliance-incidents-metrics"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/incidents/playbooks"
+  to = "/.netlify/functions/compliance-incidents-playbooks"
+  status = 200
+
+# Compliance Threat Intel API — proxy to Netlify Functions (enterprise threat intel dashboard)
+[[redirects]]
+  from = "/api/v1/compliance/threat-intel/feeds"
+  to = "/.netlify/functions/compliance-threat-intel-feeds"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/threat-intel/iocs"
+  to = "/.netlify/functions/compliance-threat-intel-iocs"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/threat-intel/summary"
+  to = "/.netlify/functions/compliance-threat-intel-summary"
+  status = 200
+
+# Compliance ERM Risk Matrix API — proxy to Netlify Functions (enterprise risk matrix dashboard)
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-matrix/risks"
+  to = "/.netlify/functions/compliance-erm-risk-matrix-risks"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-matrix/heatmap"
+  to = "/.netlify/functions/compliance-erm-risk-matrix-heatmap"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-matrix/summary"
+  to = "/.netlify/functions/compliance-erm-risk-matrix-summary"
+  status = 200
+
+# Compliance ERM Risk Register API — proxy to Netlify Functions (enterprise risk register dashboard)
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-register/risks"
+  to = "/.netlify/functions/compliance-erm-risk-register-risks"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-register/categories"
+  to = "/.netlify/functions/compliance-erm-risk-register-categories"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-register/summary"
+  to = "/.netlify/functions/compliance-erm-risk-register-summary"
+  status = 200
+
+# Compliance ERM Risk Appetite API — proxy to Netlify Functions (enterprise risk appetite dashboard)
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-appetite/thresholds"
+  to = "/.netlify/functions/compliance-erm-risk-appetite-thresholds"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-appetite/kris"
+  to = "/.netlify/functions/compliance-erm-risk-appetite-kris"
+  status = 200
+
+[[redirects]]
+  from = "/api/v1/compliance/erm/risk-appetite/summary"
+  to = "/.netlify/functions/compliance-erm-risk-appetite-summary"
+  status = 200
+
+# Supply Chain SBOM API — proxy to Netlify Functions (enterprise SBOM dashboard)
+[[redirects]]
+  from = "/api/supply-chain/sbom/documents"
+  to = "/.netlify/functions/supply-chain-sbom-documents"
+  status = 200
+
+[[redirects]]
+  from = "/api/supply-chain/sbom/summary"
+  to = "/.netlify/functions/supply-chain-sbom-summary"
+  status = 200
+
+# Supply Chain License Compliance API — proxy to Netlify Functions (enterprise license dashboard)
+[[redirects]]
+  from = "/api/supply-chain/licenses/packages"
+  to = "/.netlify/functions/supply-chain-licenses-packages"
+  status = 200
+
+[[redirects]]
+  from = "/api/supply-chain/licenses/categories"
+  to = "/.netlify/functions/supply-chain-licenses-categories"
+  status = 200
+
+[[redirects]]
+  from = "/api/supply-chain/licenses/summary"
+  to = "/.netlify/functions/supply-chain-licenses-summary"
+  status = 200
+
 # ACMM maturity scan API
 [[redirects]]
   from = "/api/acmm/scan"