Function record_compliance_event 

pub fn record_compliance_event(control_id: &str, host: &str)

Increment on ComplianceFailure event arrival in /v1/agent/report. Bounded labels: hosts × controls. No-op when metrics feature off.