Compliance dashboard rollup. Reads from the unified `compliance_events` projection (PAW-484/PAW-485). Default range when caller omits parameters is "last 30 days". The optional category filter scopes the per-category breakdown only — headline metrics always reflect the full picture in range.