feat(incidents): Go Incidents nach Python migrieren, Proxy umleiten, 50 Tests

- incident_routes.py: 15 Endpoints (CRUD, Risk Assessment, Art. 33/34 Notifications, Measures, Timeline, Close, Stats)
- Neuer Endpoint PUT /{id}/status (nicht in Go vorhanden, Frontend braucht ihn)
- Proxy von ai-compliance-sdk:8090 auf backend-compliance:8002 umgeleitet
- Go incidents_handlers.go + main.go als DEPRECATED markiert
- 50/50 Tests bestanden

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/cmd/server/main.go

@@ -614,7 +614,9 @@ func main() {
 			whistleblowerRoutes.GET("/stats", whistleblowerHandlers.GetStatistics)
 		}
 
-		// Incidents routes - Datenpannen-Management (DSGVO Art. 33/34)
+		// DEPRECATED: Incidents routes — Python backend is now Source of Truth.
+		// Frontend proxies to backend-compliance:8002/api/compliance/incidents/*
+		// These Go routes remain registered but should not be extended.
 		incidentRoutes := v1.Group("/incidents")
 		{
 			// Incident CRUD

ai-compliance-sdk/internal/api/handlers/incidents_handlers.go

@@ -1,3 +1,6 @@
+// DEPRECATED: Python backend (backend-compliance) is now Source of Truth for Incidents.
+// Frontend proxies to backend-compliance:8002/api/compliance/incidents/*
+// These Go handlers remain for backward compatibility but should not be extended.
 package handlers
 
 import (
@@ -12,6 +15,7 @@ import (
 )
 
 // IncidentHandlers handles incident/breach management HTTP requests
+// DEPRECATED: Use Python backend-compliance incident_routes.py instead.
 type IncidentHandlers struct {
 	store *incidents.Store
 }