feat: Add compliance field to versions

[mtruj013]

Done

• Added compliance fields to version schema and related tests

QA

• See that tests pass
• Alternatively, check out this feature branch
• Run the site using the commands docker compose up -d then dotrun
• Test with the following curls

Issue / Card

https://warthogs.atlassian.net/browse/WD-37230

[Copilot]

Pull request overview

This PR adds a new compliance field to product deployment versions, supporting structured compliance framework/status metadata end-to-end (DB model + migration, API schemas, and create/update flows), along with tests validating success and 400s for invalid values.

Changes:

• Add compliance JSON column to the Version model and an Alembic migration to create/drop it.
• Introduce ComplianceSchema and wire compliance into version create/update/request/response schemas with enum validation.
• Add test coverage for creating/updating compliance and for rejecting unknown framework/status values.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
webapp/views.py	Extends version creation to accept/persist compliance.
webapp/schemas.py	Adds ComplianceSchema and exposes/validates compliance across version schemas.
webapp/models.py	Adds compliance JSON column to Version.
webapp/constants.py	Defines allowed compliance frameworks and statuses for validation.
tests/test_update_product_deployment_version.py	Adds PUT tests for updating compliance and invalid values.
tests/test_create_product_deployment_version.py	Adds POST tests for creating compliance and invalid values.
tests/fixtures/models.py	Updates version fixture defaults to include compliance.
migrations/versions/d0dc7df37935_add_compliance_field_to_versions.py	Adds migration to create/drop the versions.compliance column.

[Onibenjo]

"compliance": [
   {"framework": "CIS", "status": "Achieved"},
   {"framework": "CIS", "status": "Expired"},
],

passing duplicate frameworks with different statuses are silently accepted.

We should have a validation to check for this