MCP server for regulatory compliance management — policies, controls, audits, findings, evidence collection, risk assessments, and framework mapping (GDPR, SOX, HIPAA, ISO 27001, PCI-DSS, SOC2, NIST).