fix(test): resolve ARRAY import for PostgreSQL dialect compatibility

fix(ci): resolve ruff lint errors, mypy type issues

feat(security): enable Row-Level Security on all tenant-scoped tables

feat(agents): add Agent ABC, Semantic Matching judge (#7)

test(models): add failing reproducers for the screening-run tables

test(tests): guard the README API table and .env.example against drift

feat(api): expose the rubric template catalogue over HTTP

feat(api): add starter rubric templates per role family

feat(agents): add the JD Analyst that drafts a rubric from a job description

feat(agents): add LLM provider layer with failover and PII-tier gating

test(scoring): add failing reproducers for the deterministic Phase 4 core

fix(api): close eight defects found reviewing the rubric surface

refactor(tests): guard the rubric response-model check against vacuity

feat(api): expose rubric authoring and approval endpoints

test(api): add reproducer for the rubric endpoints

test(infra): add reproducer for missing rubric migration

test(rubric): add reproducers for the rubric repository

test(rubric): add reproducers for Phase 3 rubric versioning and weights

fix(search): connect ingestion to search and remove SQL injection

fix(db): declare content_tsv as TSVECTOR to match the migration

fix(db): resolve ResumeChunk vector type and declare is_parent column

test(security): add failing prompt-injection sanitization suite

fix(security): enforce RBAC and close five denial-of-service vectors

feat: scaffold CV screener serving layer with ingestion pipeline, REST API routers, repositories, storage, parsing, security, and integration/unit test foundations

test(api): add Phase 0-1 suite with 59 tests at 93 percent coverage