feat(tpsc): Third-Party Services Catalog (CUST-WP-0023)

Introduces TPSC for tracking external service dependencies with GDPR
compliance maturity (CNIL/IAPP CMMI scale), pricing model, ToS, and
data retention information across all repos.

Primary data:
- canon/tpsc/{openai,anthropic,gemini,openrouter}-api.yaml — service definitions
- tpsc.yaml in each repo (llm-connect seeded with 4 services)

State-hub additions:
- Migration j7e8f9a0b1c2: tpsc_catalog + tpsc_snapshots + tpsc_entries
- api/models/tpsc.py, api/schemas/tpsc.py, api/routers/tpsc.py
- /tpsc/catalog/, /tpsc/ingest/, /tpsc/snapshots/, /tpsc/report/gdpr endpoints
- 4 MCP tools: register_service, list_services, ingest_tpsc_tool, get_gdpr_report
- scripts/ingest_tpsc.py + make ingest-tpsc[/-all] targets
- Dashboard: tpsc.md page + docs/tpsc.md

GDPR maturity scale: unknown | non_compliant | initial | developing | defined | managed | certified
Warnings triggered at: unknown, non_compliant, initial

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

dashboard/observablehq.config.js

@@ -25,6 +25,7 @@ export default {
     { name: "Goals",         path: "/goals" },
     { name: "Inbox",         path: "/inbox" },
     { name: "Progress",      path: "/progress" },
+    { name: "Services (TPSC)", path: "/tpsc" },
     { name: "Todo",          path: "/todo" },
     // ── Sections (alphabetical) ───────────────────────────────────────────────
     {
@@ -88,6 +89,7 @@ export default {
         { name: "SBOM",                     path: "/docs/sbom" },
         { name: "SCOPE.md",                 path: "/docs/scope" },
         { name: "Tasks",                    path: "/docs/tasks" },
+        { name: "TPSC",                     path: "/docs/tpsc" },
         { name: "Technical Debt",           path: "/docs/debt" },
         { name: "Todo",                     path: "/docs/todo" },
         { name: "Workstream Health",        path: "/docs/workstream-health-index" },