Tag RAG production deployment

Enterprise RAG should not rely on a single similarity threshold. A safer production pattern uses four gates: search scope, relevance filtering, evidence sufficiency, and post-generation grounding.