feat(cra): standalone POST /api/v1/cra/assess endpoint

Live HTTP entry for the deterministic CRA assessment — repo-scanner findings
in, CRA Annex I mapping + risk + curated measures + NIST/OWASP golden-set
crosswalk out. Project-less (works for any customer, no CE-RA/FMEA required);
reuses the tested mapper, same logic the MCP server exposes. Additive endpoint
(no contract baseline change); no DB.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

backend-compliance/main.py

@@ -56,6 +56,7 @@ from compliance.api.saving_scan_routes import router as saving_scan_router
 from compliance.api.agent_migration_routes import router as agent_migration_router
 from compliance.api.vendor_assessment_routes import router as vendor_assessment_router
 from compliance.api.cra_routes import router as cra_router
+from compliance.api.cra_assess_routes import router as cra_assess_router
 from compliance.api.quaidal_routes import router as quaidal_router
 
 # Middleware
@@ -171,6 +172,7 @@ app.include_router(vendor_assessment_router, prefix="/api")
 
 # CRA (Cyber Resilience Act) Compliance
 app.include_router(cra_router, prefix="/api")
+app.include_router(cra_assess_router, prefix="/api")
 app.include_router(quaidal_router, prefix="/api")