Add third-party risk tasks to compliance log before reviews

Your third-party risk tasks land unlogged in trackers, causing vendor oversight gaps and delayed remediation. Compliance officers get a single record for reporting and action before the next review.