Produce a complete vendor onboarding risk report from live domain, TLS, website, hosting, OFAC, GLEIF, and optional SEC evidence, with an explicit decision and next action.