GDPR and EU AI Act Convergence: What the 2026 Enforcement Framework Means for Mid-Market Compliance Programs