Governed RAG AI: Secure Enterprise RAG with RBAC & Compliance