refactor(security): migrate compliance domains to retained Config

[foxzool]

Parent

#425

What to build

让 Security and Compliance v1/v2 与 ACS 共享同一 canonical Config implementation。

Acceptance criteria

• v1/v2 不再从 SecurityConfig 重建 core Config
• 认证、headers、timeout 和错误上下文保持
• 代表性 v1/v2 leaf wiremock 测试通过
• 公开 leaf builder interface 无变化

Blocked by

• refactor(security): add canonical Config construction path #444