refactor: Source Policy — strip PII/Audit/Blocked, move to Zusatzmodule

- Removed: PII-Regeln tab (→ Core Service, other repo)
- Removed: Audit tab (→ redundant with Document Workflow + RBAC)
- Removed: Blockierte Inhalte tab (→ belongs to PII)
- Kept: Quellen-Whitelist + Berechtigungen (Operations Matrix)
- Renamed: "Source Policy" → "Quellen-Verwaltung"
- Moved: From Paket 1 (Pflicht) to Zusatzmodule (optional)
- sdk-steps.ts: isOptional=true, requirements no longer depends on it
- Sidebar: Added under Zusatzmodule section
- Page reduced from 365 → 130 lines

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

admin-compliance/lib/sdk/types/sdk-steps.ts

@@ -89,13 +89,13 @@ export const SDK_STEPS: SDKStep[] = [
     phase: 1,
     package: 'vorbereitung',
     order: 7,
-    name: 'Source Policy',
+    name: 'Quellen-Verwaltung',
     nameShort: 'Quellen',
-    description: 'Datenquellen-Governance & Whitelist',
+    description: 'RAG Quellen-Whitelist (Enterprise)',
     url: '/sdk/source-policy',
     checkpointId: 'CP-SPOL',
     prerequisiteSteps: ['modules'],
-    isOptional: false },
+    isOptional: true },
 
   // PAKET 2: ANALYSE (Assessment)
   {
@@ -109,7 +109,7 @@ export const SDK_STEPS: SDKStep[] = [
     description: 'Pr\u00fcfaspekte aus Regulierungen ableiten',
     url: '/sdk/requirements',
     checkpointId: 'CP-REQ',
-    prerequisiteSteps: ['source-policy'],
+    prerequisiteSteps: ['modules'],
     isOptional: false },
   {
     id: 'controls',