INV-011 extension: Sensitive resources with Oban queues must have paper_trail.

Rule ID: :oban_trigger_on_sensitive_unaudited

If a resource is declared sensitive in the manifest and has Oban queues (background jobs) but does not use AshPaperTrail, it is an error. Background processing of sensitive data without audit history is a compliance gap.