[Epic] Add risk engine for DB, Mendix, config, and manual steps

[phamhungptithcm]

Goal

Build a risk engine that flags changes which should not be treated like ordinary application code promotion.

Scope

• database migrations
• Mendix .mpr and other high-risk assets
• config or secret changes
• feature flags
• missing dependency tickets
• manual release steps

Task Checklist

• define risk signal categories and severity levels
• detect high-risk file types and repo types
• surface manual-step and dependency blockers in planning output
• classify results as safe, warning, manual-review, or blocked
• document which risks can never be auto-resolved

Acceptance Criteria

• risky tickets are clearly separated from safe tickets in release planning
• DB, Mendix, config, and manual-step concerns are visible before promotion
• the tool does not imply safety where manual review is still required

References

• docs/07-promotion-engine.md
• docs/12-mendix-considerations.md
• docs/18-operating-model.md