Add configurable compliance portal commitment cards

The compliance portal home page rendered security-commitment cards from
a hardcoded placeholder POJO. Back them with real, per-organization data
that admins configure in the console and the portal loads over the trust
center GraphQL API.

Model two entities under the trust center: a commitment group (title,
description, rank) and a commitment card (icon, eyebrow, title,
description, rank). The card icon is a curated enum mapped to a Phosphor
icon in the portal. New entities adopt the compliance_portal_ prefix as
the start of the broader rename away from trust_center_ naming.

Expose the groups and cards read-only on the public trust API and with
full CRUD on the console API, add a Commitments tab to the compliance
page, and replace the placeholder section with a Relay-driven one.

Signed-off-by: Émile Ré <emile@probo.com>

pkg/server/api/trust/v1/graphql/trust_center.graphql

@@ -47,6 +47,13 @@ type TrustCenter implements Node {
     before: CursorKey
   ): TrustCenterReferenceConnection! @goField(forceResolver: true)
 
+  commitmentGroups(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): CompliancePortalCommitmentGroupConnection! @goField(forceResolver: true)
+
   trustCenterFiles(
     first: Int
     after: CursorKey
@@ -304,6 +311,91 @@ type TrustCenterReferenceEdge @nda {
   node: TrustCenterReference!
 }
 
+enum CompliancePortalCommitmentIcon
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIcon") {
+  LOCK_KEY
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconLockKey")
+  EYE_SLASH
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconEyeSlash")
+  FINGERPRINT
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconFingerprint")
+  SHIELD_WARNING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconShieldWarning")
+  SHIELD_CHECK
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconShieldCheck")
+  SIREN
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconSiren")
+  KEY
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconKey")
+  LOCK
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconLock")
+  CLOUD
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCloud")
+  DATABASE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconDatabase")
+  GLOBE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconGlobe")
+  EYE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconEye")
+  USERS
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconUsers")
+  CERTIFICATE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCertificate")
+  GAVEL
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconGavel")
+  HEARTBEAT
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconHeartbeat")
+  BELL
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconBell")
+  BUG
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconBug")
+  CODE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCode")
+  SERVER
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconServer")
+}
+
+type CompliancePortalCommitmentGroup implements Node {
+  id: ID!
+  title: String!
+  description: String!
+
+  commitments(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): CompliancePortalCommitmentConnection! @goField(forceResolver: true)
+}
+
+type CompliancePortalCommitmentGroupConnection {
+  edges: [CompliancePortalCommitmentGroupEdge!]!
+  pageInfo: PageInfo!
+}
+
+type CompliancePortalCommitmentGroupEdge {
+  cursor: CursorKey!
+  node: CompliancePortalCommitmentGroup!
+}
+
+type CompliancePortalCommitment implements Node {
+  id: ID!
+  icon: CompliancePortalCommitmentIcon!
+  eyebrow: String!
+  title: String!
+  description: String!
+}
+
+type CompliancePortalCommitmentConnection {
+  edges: [CompliancePortalCommitmentEdge!]!
+  pageInfo: PageInfo!
+}
+
+type CompliancePortalCommitmentEdge {
+  cursor: CursorKey!
+  node: CompliancePortalCommitment!
+}
+
 type TrustCenterFile implements Node @nda {
   id: ID!
   name: String!