Add async third-party vetting

Queue vetting on third_parties with PENDING, PROCESSING,
COMPLETED, and FAILED states. Expose enqueue and status through
GraphQL, MCP, CLI, and n8n, validate vet requests, tune the
worker via config, and poll the detail page while vetting runs.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/server/api/console/v1/graphql/third_party.graphql

@@ -1,3 +1,23 @@
+enum ThirdPartyVettingStatus
+    @goModel(model: "go.probo.inc/probo/pkg/coredata.ThirdPartyVettingStatus") {
+    PENDING
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.ThirdPartyVettingStatusPending"
+        )
+    PROCESSING
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.ThirdPartyVettingStatusProcessing"
+        )
+    COMPLETED
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.ThirdPartyVettingStatusCompleted"
+        )
+    FAILED
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.ThirdPartyVettingStatusFailed"
+        )
+}
+
 enum ThirdPartyCategory
     @goModel(model: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategory") {
     ANALYTICS
@@ -293,6 +313,8 @@ type ThirdParty implements Node {
         orderBy: ThirdPartyOrder
     ): ThirdPartyConnection! @goField(forceResolver: true)
 
+    vettingStatus: ThirdPartyVettingStatus @goField(forceResolver: true)
+
     createdAt: Datetime!
     updatedAt: Datetime!
 
@@ -480,7 +502,7 @@ extend type Mutation {
     createThirdPartyRiskAssessment(
         input: CreateThirdPartyRiskAssessmentInput!
     ): CreateThirdPartyRiskAssessmentPayload!
-    assessThirdParty(input: AssessThirdPartyInput!): AssessThirdPartyPayload!
+    vetThirdParty(input: VetThirdPartyInput!): VetThirdPartyPayload!
     publishThirdPartyList(
         input: PublishThirdPartyListInput!
     ): PublishThirdPartyListPayload!
@@ -652,18 +674,12 @@ input CreateThirdPartyRiskAssessmentInput {
     notes: String
 }
 
-input AssessThirdPartyInput {
+input VetThirdPartyInput {
     id: ID!
     websiteUrl: String!
     procedure: String
 }
 
-type ThirdPartySubprocessor {
-    name: String!
-    country: String!
-    purpose: String!
-}
-
 type CreateThirdPartyPayload {
     thirdPartyEdge: ThirdPartyEdge!
 }
@@ -736,10 +752,8 @@ type CreateThirdPartyRiskAssessmentPayload {
     thirdPartyRiskAssessmentEdge: ThirdPartyRiskAssessmentEdge!
 }
 
-type AssessThirdPartyPayload {
+type VetThirdPartyPayload {
     thirdParty: ThirdParty!
-    report: String!
-    subprocessors: [ThirdPartySubprocessor!]!
 }
 
 input CreateThirdPartyThirdPartyMappingInput {