Update GraphQL, MCP, and CLI for the portal

Rewire the console and visitor resolvers onto the management and visitor
services with compliance-portal authorization. Rename the GraphQL and MCP
ComplianceExternalURL type to ComplianceCustomLink, expose trust center
profile fields, default and custom domains, public URL, and the managed
flag, and drop the profile fields from the organization surface.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/server/api/slack/v1/resolver.go

@@ -23,8 +23,8 @@ package slack_v1
 import (
 	"github.com/go-chi/chi/v5"
 	"go.gearno.de/kit/log"
+	trust "go.probo.inc/probo/pkg/complianceportal/visitor"
 	"go.probo.inc/probo/pkg/slack"
-	"go.probo.inc/probo/pkg/trust"
 )
 
 func NewMux(

pkg/server/api/slack/v1/slack_handler.go

@@ -30,10 +30,10 @@ import (
 
 	"go.gearno.de/kit/httpserver"
 	"go.gearno.de/kit/log"
+	trust "go.probo.inc/probo/pkg/complianceportal/visitor"
 	"go.probo.inc/probo/pkg/coredata"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/slack"
-	"go.probo.inc/probo/pkg/trust"
 )
 
 type (
@@ -247,7 +247,7 @@ func SlackHandler(slackSvc *slack.Service, slackSigningSecret string, logger *lo
 
 		switch statusAction {
 		case StatusAccept:
-			if err := trustSvc.TrustCenterAccesses.GrantByIDs(
+			if err := trustSvc.GrantPortalAccessByIDs(
 				ctx,
 				scope,
 				initialSlackMessage.OrganizationID,
@@ -262,7 +262,7 @@ func SlackHandler(slackSvc *slack.Service, slackSigningSecret string, logger *lo
 				return
 			}
 		case StatusReject:
-			if err := trustSvc.TrustCenterAccesses.RejectOrRevokeByIDs(
+			if err := trustSvc.RejectOrRevokePortalAccessByIDs(
 				ctx,
 				scope,
 				initialSlackMessage.OrganizationID,