Add risk assessment boundary model

Introduce RiskAssessmentBoundary as a first-class, self-nesting entity that
groups nodes within a risk assessment scope, and thread it through every
surface.

- coredata: new risk_assessment_boundaries table + migration, boundary_id on
  nodes, self-referential parent_boundary_id, entity type registration
- riskmanagement: boundary CRUD service methods, boundary_id wiring on node
  create/update, scope-membership and self-parent validation, nested-subgraph
  Mermaid rendering
- IAM: core:risk-assessment-boundary:{get,list,create,update,delete} actions
  and viewer/auditor read policies
- console GraphQL: RiskAssessmentBoundary type, connection, order enum, CRUD
  mutations, boundaries field on scope, boundaryId on nodes
- CLI: risk-assessment boundary command group and --boundary-id on nodes
- MCP: boundary tools and boundary_id on node tools
- n8n: boundary operations and boundary fields on node operations
- console UI: boundary list/create/edit, boundary selector on nodes, diagram
  refetch on boundary changes

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

packages/n8n-node/nodes/Probo/actions/riskAssessment/updateNode.operation.ts

@@ -59,10 +59,6 @@ export const description: INodeProperties[] = [
 						name: 'Entity',
 						value: 'ENTITY',
 					},
-					{
-						name: 'Boundary',
-						value: 'BOUNDARY',
-					},
 					{
 						name: 'Asset',
 						value: 'ASSET',
@@ -75,6 +71,13 @@ export const description: INodeProperties[] = [
 				default: 'ENTITY',
 				description: 'The type of the node',
 			},
+			{
+				displayName: 'Boundary ID',
+				name: 'boundaryId',
+				type: 'string',
+				default: '',
+				description: 'The ID of the boundary that contains this node. Leave empty to move it to the top level.',
+			},
 		],
 	},
 ];
@@ -87,6 +90,7 @@ export async function execute(
 	const additionalFields = this.getNodeParameter('additionalFields', itemIndex, {}) as {
 		name?: string;
 		nodeType?: string;
+		boundaryId?: string;
 	};
 
 	const query = `
@@ -95,6 +99,7 @@ export async function execute(
 				riskAssessmentNode {
 					id
 					riskAssessmentScopeId
+					boundaryId
 					nodeType
 					name
 					createdAt
@@ -107,6 +112,9 @@ export async function execute(
 	const input: Record<string, unknown> = { id: nodeId };
 	if (additionalFields.name) input.name = additionalFields.name;
 	if (additionalFields.nodeType) input.nodeType = additionalFields.nodeType;
+	if (additionalFields.boundaryId !== undefined) {
+		input.boundaryId = additionalFields.boundaryId || null;
+	}
 
 	if (Object.keys(input).length === 1) {
 		throw new Error('At least one field must be provided to update');