V7: Scheduled + on-demand compliance runs

[ckrough]

Complexity: M

Scope

Run orchestration for the compliance sweep:

• An on-demand entrypoint (endpoint or command) to run a sweep for one org.
• A scheduled batch (Cloud Run job / cron) that sweeps all active animals for an org.
• Each run is recorded: run_id, started/finished timestamps, and per-status counts.

Dependencies

• Blocked by: V6: Diff / compliance engine #308 (the engine the runs invoke).
• Blocks: none.

Acceptance criteria

• Invoking the on-demand run for a fixture org produces sync-status rows for its animals (integration test with mocked adapters).
• A scheduled entrypoint exists and is wired into the Compose/CI config (asserted by a config check or a dry-run invocation).
• Each run records a run_id and per-status counts (asserted).

---

ADR: docs/adr/0033-listing-sync-verification.md. Epic: #302.