Add data request pages to compliance portal

Let trust-portal data subjects submit and track GDPR/CCPA rights
requests. The new Data Requests page lists the viewer's own requests
and a dialog submits new ones, scoped server-side to the verified
viewer email so former or inactive users can still exercise their
rights. Submission requires magic-link sign-in (reusing the existing
gate) but not the NDA gate.

Extend the shared rights_request enums with RECTIFICATION, OBJECTION
and COMPLAINT types plus a REJECTED state, and keep the console
GraphQL, @probo/helpers and the MCP specification in sync. Expose a
trust GraphQL surface (myRightsRequests query, createRightsRequest
mutation) backed by a trust service and contact-scoped coredata
loaders.

Add the missing v2 UI kit primitives the dialog needs on top of Base
UI: a SegmentedControl radio-cards group, a form Textarea, and a
Field wrapper.

Signed-off-by: Émile Ré <emile@probo.com>

pkg/server/api/console/v1/graphql/rights_request.graphql

@@ -8,10 +8,22 @@ enum RightsRequestType
         @goEnum(
             value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeDeletion"
         )
+    RECTIFICATION
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeRectification"
+        )
     PORTABILITY
         @goEnum(
             value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypePortability"
         )
+    OBJECTION
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeObjection"
+        )
+    COMPLAINT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeComplaint"
+        )
 }
 
 enum RightsRequestState
@@ -24,6 +36,10 @@ enum RightsRequestState
         )
     DONE
         @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestStateDone")
+    REJECTED
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.RightsRequestStateRejected"
+        )
 }
 
 enum RightsRequestOrderField