CI/CD Accessibility Testing

Recommended gates:

• PR: warn on new violations, block on critical
• Nightly: full crawl with risk trends
• Release: export reports for reviews