Compliance in the Age of AI: Why Strong CI/CD Foundations Matter