From Start to Certificate: A Practitioner’s Guide to SOC 2 Compliance