GLP-1 revenue built two years of medspa growth. 2026 enforcement is targeting the practices that skipped the compliance basics. Here's what to fix now.