RAI CI/CD Gates

Add RAI gates to CI/CD so that responsibility is enforced by the build system, not memory. Learn fairness gates (block deploy if fairness regression beyond threshold), robustness gates (perturbation tests pass), prompt-injection gates for LLM apps, model-card freshness gates (model card matches the deployed weights), evaluation parity gates, and the gate-bypass governance for the rare case where bypass is justified.