[codex] Productize AIx platform

[mindbomber]

Summary

• productizes AIx as a multi-tenant API and React workspace
• adds enterprise identity, governed evidence storage, durable jobs, audit/privacy workflows, webhooks, generated clients, and calibration tooling
• adds PostgreSQL migrations, Redis/S3 integrations, observability, Terraform, Kubernetes overlays, CI security/DR/load/accessibility gates, and release workflows
• removes the subprocess malware scanner backend in favor of clamd and repairs release-candidate CI portability

Why

AIx needs an inspectable production-capable measurement platform around the paper-grounded scoring engine, while preserving an explicit boundary between implemented software and independent empirical validation.

Validation

• 53 Python tests pass with 81.29% coverage
• Bandit and Ruff pass
• OpenAPI and generated client checks pass on Windows and clean Linux
• frontend lint and production build pass
• Kubernetes, Terraform, Compose, package, load, security, accessibility, and restore gates are included in CI

Remaining external gates

• deploy to an authenticated staging cluster
• run staging acceptance and disaster-recovery checks
• collect independent empirical validation data before making validity claims