Add non-metric category filters to compliance page

Adds a CategoryFilterBar with pill-shaped FilterChip components below the
metric health cards. Non-metric categories (Missing_AppID, Aging Vulns,
Missing_DF, etc.) are derived dynamically from device data and displayed
as color-coded filterable chips with device counts.

Unified filter state replaces the old metricFilter array, ensuring mutual
exclusivity between metric card filters and non-metric chip filters.
Includes 4 property-based tests validating derivation, filter predicate,
mutual exclusivity, and color resolution correctness.

Closes #26

frontend/src/data/complianceCategories.json

@@ -0,0 +1,25 @@
+{
+  "1.1.1": "Logging & Monitoring",
+  "1.1.3": "Logging & Monitoring",
+  "1.4.1": "Logging & Monitoring",
+  "2.3.4i": "Vulnerability Management",
+  "2.3.6i": "Vulnerability Management",
+  "2.3.8i": "Vulnerability Management",
+  "5.2.4": "Access & MFA",
+  "5.2.5": "Access & MFA",
+  "5.2.6": "Access & MFA",
+  "5.2.7": "Access & MFA",
+  "5.2.8": "Access & MFA",
+  "5.3.4": "Endpoint Protection",
+  "5.5.4i": "Vulnerability Management",
+  "5.5.5": "Decommissioned Assets",
+  "5.8.1": "Application Security",
+  "7.1.1": "Logging & Monitoring",
+  "7.1.4": "Logging & Monitoring",
+  "7.6.13": "Disaster Recovery",
+  "7.6.16": "Disaster Recovery",
+  "Missing_AppID": "Asset Data Quality",
+  "Missing_DF": "Asset Data Quality",
+  "Missing_OS": "Asset Data Quality",
+  "5.5.2": "Other"
+}