feat(sdk): Multi-Tenancy, Versionierung, Change-Requests, Dokumentengenerierung (Phase 1-6)

6-Phasen-Implementation fuer cloud-faehiges, mandantenfaehiges Compliance SDK:

Phase 1: Multi-Tenancy Fix
- Shared tenant_utils.py Dependency (UUID-Validierung, kein "default" mehr)
- VVT tenant_id Column + tenant-scoped Queries
- DSFA/Vendor DEFAULT_TENANT_ID von "default" auf UUID migriert
- Migration 035

Phase 2: Stammdaten-Erweiterung
- Company Profile um JSONB-Felder erweitert (processing_systems, ai_systems, technical_contacts)
- Regulierungs-Flags (NIS2, AI Act, ISO 27001)
- GET /template-context Endpoint
- Migration 036

Phase 3: Dokument-Versionierung
- 5 Versions-Tabellen (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Shared versioning_utils.py Helper
- /{id}/versions Endpoints auf allen 5 Dokumenttypen
- Migration 037

Phase 4: Change-Request System
- Zentrale CR-Inbox mit CRUD + Accept/Reject/Edit Workflow
- Regelbasierte CR-Engine (VVT DPIA → DSFA CR, Datenkategorien → Loeschfristen CR)
- Audit-Trail
- Migration 038

Phase 5: Dokumentengenerierung
- 5 Template-Generatoren (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Preview + Apply Endpoints (erzeugt CRs, keine direkten Dokumente)

Phase 6: Frontend-Integration
- Change-Request Inbox Page mit Stats, Filtern, Modals
- VersionHistory Timeline-Komponente
- SDKSidebar CR-Badge (60s Polling)
- Company Profile: 2 neue Wizard-Steps + "Dokumente generieren" CTA

Docs: 5 neue MkDocs-Seiten, CLAUDE.md aktualisiert
Tests: 97 neue Tests (alle bestanden)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-compliance/compliance/db/vvt_models.py

@@ -24,6 +24,7 @@ class VVTOrganizationDB(Base):
     __tablename__ = 'compliance_vvt_organization'
 
     id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    tenant_id = Column(String(255), nullable=False, index=True)
     organization_name = Column(String(300), nullable=False)
     industry = Column(String(100))
     locations = Column(JSON, default=list)
@@ -51,7 +52,8 @@ class VVTActivityDB(Base):
     __tablename__ = 'compliance_vvt_activities'
 
     id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
-    vvt_id = Column(String(50), unique=True, nullable=False)
+    tenant_id = Column(String(255), nullable=False, index=True)
+    vvt_id = Column(String(50), nullable=False)
     name = Column(String(300), nullable=False)
     description = Column(Text)
     purposes = Column(JSON, default=list)
@@ -83,7 +85,7 @@ class VVTActivityDB(Base):
     __table_args__ = (
         Index('idx_vvt_activities_status', 'status'),
         Index('idx_vvt_activities_business_function', 'business_function'),
-        Index('idx_vvt_activities_vvt_id', 'vvt_id'),
+        Index('idx_vvt_activities_tenant_status', 'tenant_id', 'status'),
     )
 
     def __repr__(self):
@@ -96,6 +98,7 @@ class VVTAuditLogDB(Base):
     __tablename__ = 'compliance_vvt_audit_log'
 
     id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    tenant_id = Column(String(255), nullable=False, index=True)
     action = Column(String(20), nullable=False)       # CREATE, UPDATE, DELETE, EXPORT
     entity_type = Column(String(50), nullable=False)  # activity, organization
     entity_id = Column(UUID(as_uuid=True))