Add scope validation and system capabilities: Handle meta queries and reject out-of-scope questions

Fix: All 7 critical bugs + 4 security enhancements + compensation policy

Initial commit: Olist intelligence layer with database