feat: Add legal compliance changes

- Replace 'diploma mill' language with objective 'unaccredited institution' terminology
- Rename DiplomaMills.cs to UnaccreditedInstitutions.cs with neutral language
- Update EducationVerificationResult.IsUnaccredited property
- Update flag titles to 'Unaccredited Institution' and 'Institution Requires Verification'
- Add legal disclaimer to verification report page
- Add Privacy Policy page (/privacy) with UK GDPR compliance info
- Add Terms of Service page (/terms) with candidate notice requirements
- Add footer links to Privacy and Terms pages
- Update all tests to use new terminology

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

src/RealCV.Web/Components/Pages/Report.razor

@@ -470,6 +470,40 @@
                 </div>
             </div>
         }
+
+        <!-- Legal Disclaimer -->
+        <div class="card border-0 shadow-sm mb-4">
+            <div class="card-body">
+                <h6 class="text-muted mb-3">
+                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-info-circle me-2" viewBox="0 0 16 16">
+                        <path d="M8 15A7 7 0 1 1 8 1a7 7 0 0 1 0 14zm0 1A8 8 0 1 0 8 0a8 8 0 0 0 0 16z"/>
+                        <path d="m8.93 6.588-2.29.287-.082.38.45.083c.294.07.352.176.288.469l-.738 3.468c-.194.897.105 1.319.808 1.319.545 0 1.178-.252 1.465-.598l.088-.416c-.2.176-.492.246-.686.246-.275 0-.375-.193-.304-.533L8.93 6.588zM9 4.5a1 1 0 1 1-2 0 1 1 0 0 1 2 0z"/>
+                    </svg>
+                    Important Information
+                </h6>
+                <div class="small text-muted">
+                    <p class="mb-2">
+                        <strong>This report is for informational purposes only.</strong> The verification results are based on
+                        publicly available data from Companies House and other official sources. This analysis should be
+                        used as one input among many in your hiring decision-making process.
+                    </p>
+                    <p class="mb-2">
+                        <strong>Limitations:</strong> This automated verification cannot confirm whether a specific individual
+                        actually worked at a verified company, only that the company exists and was active during the claimed
+                        employment period. Education verification is based on institutional recognition status only.
+                    </p>
+                    <p class="mb-2">
+                        <strong>Not a substitute for thorough background checks:</strong> We recommend supplementing this
+                        report with direct reference checks, qualification verification with issuing institutions, and
+                        other appropriate due diligence measures.
+                    </p>
+                    <p class="mb-0">
+                        <strong>Candidate rights:</strong> Data subjects have the right to request access to, correction of,
+                        or deletion of their personal data. For enquiries, please contact us via our website.
+                    </p>
+                </div>
+            </div>
+        </div>
     }
 </div>