feat: scheduler web+worker merge + audit Batch 1 (68 endpoints annotated)

Scheduler:
- Merge scheduler-worker into scheduler-web with Worker:Embedded flag
- Default embedded=true (compose), false available for K8s split
- Upgrade to resources-heavy, comment out scheduler-worker container

Audit Batch 1 (first real audit emission):
- Create AuditedRouteGroupExtensions convention helper
- EvidenceLocker: 7 endpoints (store/snapshot/verify/hold/export/verdict)
- Integrations: 6 endpoints (CRUD + test + discover)
- Scanner: 55 endpoints across 25 files
- Sprint 005 FILTER-001/002/003 marked DONE

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

devops/compose/docker-compose.compliance-eu.yml

@@ -121,18 +121,18 @@ services:
       com.stellaops.compliance: "eidas"
 
   # ---------------------------------------------------------------------------
-  # Scheduler Worker - EU crypto overlay
+  # Scheduler Worker - MERGED into scheduler-web (Scheduler:Worker:Embedded=true)
   # ---------------------------------------------------------------------------
-  scheduler-worker:
-    image: registry.stella-ops.org/stellaops/scheduler-worker:eu
-    environment:
-      <<: *crypto-env
-    volumes:
-      - ../../etc/appsettings.crypto.eu.yaml:/app/etc/appsettings.crypto.yaml:ro
-      - ../../etc/crypto-plugins-manifest.json:/app/etc/crypto-plugins-manifest.json:ro
-    labels:
-      com.stellaops.crypto.profile: "eu"
-      com.stellaops.compliance: "eidas"
+  # scheduler-worker:
+  #   image: registry.stella-ops.org/stellaops/scheduler-worker:eu
+  #   environment:
+  #     <<: *crypto-env
+  #   volumes:
+  #     - ../../etc/appsettings.crypto.eu.yaml:/app/etc/appsettings.crypto.yaml:ro
+  #     - ../../etc/crypto-plugins-manifest.json:/app/etc/crypto-plugins-manifest.json:ro
+  #   labels:
+  #     com.stellaops.crypto.profile: "eu"
+  #     com.stellaops.compliance: "eidas"
 
   # ---------------------------------------------------------------------------
   # Notify Web - EU crypto overlay