Design pattern across all of these: one orchestrator persists one "unified finding" document type per domain (rather than a table per scanner type) — ComplianceAssessment / DevSecOpsFinding / ...