COR-1633: POL-02: wait for blocking rules

[leenk7991]

Summary

• With --fail, poll check_blocking_rules until license evaluation finishes (status != pending), up to 15 minutes, then fail closed.
• Older backends that omit status default to complete (one-shot, same as today).
• corgea ls stays one-shot and does not wait.
• pairs with https://github.com/Corgea/doghouse/pull/1672

Test plan

• cargo check
• unit: missing/pending/complete status deserialize
• E2E: license blocking rule + forced pending → spinner wait, then exit 0/1 after complete
• Without --fail: no blocking-rules wait
• Old doghouse (no status): still one-shot

Running without --fail

---

Running with --fail

---

Scanning a different project that doesn't have license violations

---

Blocking rule disabled

---

Timeout (status hardcoded to "pending" in doghouse)

---

Older CLI version unaffected by status

[corgea-security]

Automated review risk: 4/5.

The polling implementation can bypass blocking rules for unexpected statuses and abort valid scans after a single transient request failure.

Critical or high-priority changes must be addressed.

Automatic approval was not submitted: automated review found critical or high-priority findings.

[Ibrahimrahhal]

LGTM