feat(sdk): Multi-Tenancy, Versionierung, Change-Requests, Dokumentengenerierung (Phase 1-6)

6-Phasen-Implementation fuer cloud-faehiges, mandantenfaehiges Compliance SDK:

Phase 1: Multi-Tenancy Fix
- Shared tenant_utils.py Dependency (UUID-Validierung, kein "default" mehr)
- VVT tenant_id Column + tenant-scoped Queries
- DSFA/Vendor DEFAULT_TENANT_ID von "default" auf UUID migriert
- Migration 035

Phase 2: Stammdaten-Erweiterung
- Company Profile um JSONB-Felder erweitert (processing_systems, ai_systems, technical_contacts)
- Regulierungs-Flags (NIS2, AI Act, ISO 27001)
- GET /template-context Endpoint
- Migration 036

Phase 3: Dokument-Versionierung
- 5 Versions-Tabellen (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Shared versioning_utils.py Helper
- /{id}/versions Endpoints auf allen 5 Dokumenttypen
- Migration 037

Phase 4: Change-Request System
- Zentrale CR-Inbox mit CRUD + Accept/Reject/Edit Workflow
- Regelbasierte CR-Engine (VVT DPIA → DSFA CR, Datenkategorien → Loeschfristen CR)
- Audit-Trail
- Migration 038

Phase 5: Dokumentengenerierung
- 5 Template-Generatoren (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Preview + Apply Endpoints (erzeugt CRs, keine direkten Dokumente)

Phase 6: Frontend-Integration
- Change-Request Inbox Page mit Stats, Filtern, Modals
- VersionHistory Timeline-Komponente
- SDKSidebar CR-Badge (60s Polling)
- Company Profile: 2 neue Wizard-Steps + "Dokumente generieren" CTA

Docs: 5 neue MkDocs-Seiten, CLAUDE.md aktualisiert
Tests: 97 neue Tests (alle bestanden)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-compliance/compliance/api/tom_routes.py

@@ -573,3 +573,37 @@ async def export_measures(
         media_type="text/csv; charset=utf-8",
         headers={"Content-Disposition": "attachment; filename=tom_export.csv"},
     )
+
+
+# =============================================================================
+# Versioning
+# =============================================================================
+
+@router.get("/measures/{measure_id}/versions")
+async def list_measure_versions(
+    measure_id: str,
+    tenant_id: Optional[str] = Query(None, alias="tenant_id"),
+    tenantId: Optional[str] = Query(None, alias="tenantId"),
+    db: Session = Depends(get_db),
+):
+    """List all versions for a TOM measure."""
+    from .versioning_utils import list_versions
+    tid = tenant_id or tenantId or DEFAULT_TENANT_ID
+    return list_versions(db, "tom", measure_id, tid)
+
+
+@router.get("/measures/{measure_id}/versions/{version_number}")
+async def get_measure_version(
+    measure_id: str,
+    version_number: int,
+    tenant_id: Optional[str] = Query(None, alias="tenant_id"),
+    tenantId: Optional[str] = Query(None, alias="tenantId"),
+    db: Session = Depends(get_db),
+):
+    """Get a specific TOM measure version with full snapshot."""
+    from .versioning_utils import get_version
+    tid = tenant_id or tenantId or DEFAULT_TENANT_ID
+    v = get_version(db, "tom", measure_id, version_number, tid)
+    if not v:
+        raise HTTPException(status_code=404, detail=f"Version {version_number} not found")
+    return v