[quality] ratchet up 10 stale Go coverage baselines to actual values

.github/go-package-coverage-ratchet.txt

@@ -12,24 +12,24 @@ pkg/api 60.5
 pkg/k8s 68.5
 
 # --- Tier 2: Critical integrations ---
-pkg/notifications 75.0
+pkg/notifications 78.5
 pkg/kagentiprovider 83.5
-pkg/sanitize 85.0
+pkg/sanitize 100.0
 pkg/store 75.1
 
 # --- Tier 3: Supporting packages ---
-pkg/kagent 85.0
-pkg/mcp 65.0
-pkg/models 0.0
-pkg/stellar 80.0
-pkg/watcher 67.1
-pkg/settings 75.0
-pkg/rewards 95.0
-pkg/safego 65.0
-pkg/fileutil 50.0
+pkg/kagent 86.2
+pkg/mcp 67.2
+pkg/models 100.0
+pkg/stellar 100.0
+pkg/watcher 72.8
+pkg/settings 77.1
+pkg/rewards 100.0
+pkg/safego 100.0
+pkg/fileutil 54.2
 
 # --- Tier 3: Previously untracked (have tests, need ratchet baseline) ---
-pkg/ai 0.0
+pkg/ai 100.0
 pkg/gpu 86.2
 pkg/kb 100.0
 pkg/kb/rag 93.6
@@ -39,19 +39,19 @@ pkg/services/team 83.9
 pkg/services/user 83.3
 
 # --- Compliance engines (start at 0, ratchet up as evaluation tests land) ---
-pkg/compliance/fedramp 65.0
-pkg/compliance/hipaa 70.0
-pkg/compliance/nist80053 65.0
-pkg/compliance/slsa 60.0
-pkg/compliance/sbom 60.0
-pkg/compliance/signing 60.0
-pkg/compliance/licenses 55.0
-pkg/compliance/stig 65.0
-pkg/compliance/baa 65.0
-pkg/compliance/airgap 65.0
-pkg/compliance/sod 60.0
-pkg/compliance/gxp 60.0
-pkg/compliance/changecontrol 60.0
-pkg/compliance/residency 65.0
-pkg/compliance/frameworks 70.0
-pkg/compliance/reports 75.0
+pkg/compliance/fedramp 100.0
+pkg/compliance/hipaa 100.0
+pkg/compliance/nist80053 100.0
+pkg/compliance/slsa 100.0
+pkg/compliance/sbom 100.0
+pkg/compliance/signing 100.0
+pkg/compliance/licenses 100.0
+pkg/compliance/stig 100.0
+pkg/compliance/baa 100.0
+pkg/compliance/airgap 100.0
+pkg/compliance/sod 88.5
+pkg/compliance/gxp 98.0
+pkg/compliance/changecontrol 95.3
+pkg/compliance/residency 85.5
+pkg/compliance/frameworks 100.0
+pkg/compliance/reports 100.0