Compliance Review Management

List reviews:
  Partner ──GET /v2/compliance-reviews──> API
         <── 200 OK { reviews: [ { id, name, scope, organizationUnitId, companyId, kind, createdAt } ] }

Get review details:
  Partner ──GET /v2/compliance-reviews/{id}──> API
         <── 200 OK { id, name, scope, organizationUnitId, companyId,
                      complianceFrameworkId, kind, createdAt, updatedAt }

Update review metadata:
  Partner ──PATCH /v2/compliance-reviews/{id}──> API
         <── 200 OK { updated review }

Append documents to existing review:
  Partner ──POST /v2/documents/submit──> API
         (complianceReviewId: "{reviewId}")
         <── 200 OK { new documentId under same review }