RAG Design Decisions for Regulated Enterprise Data