feat: 6 Dokumentations-Module auf 100% — VVT Backend, Filter, PDF-Export

Phase 1 — VVT Backend (localStorage → API):
- migrations/006_vvt.sql: Neue Tabellen (vvt_organization, vvt_activities, vvt_audit_log)
- compliance/db/vvt_models.py: SQLAlchemy-Models für alle VVT-Tabellen
- compliance/api/vvt_routes.py: Vollständiger CRUD-Router (10 Endpoints)
- compliance/api/__init__.py: VVT-Router registriert
- compliance/api/schemas.py: VVT Pydantic-Schemas ergänzt
- app/(sdk)/sdk/vvt/page.tsx: API-Client + camelCase↔snake_case Mapping,
  localStorage durch persistente DB-Calls ersetzt (POST/PUT/DELETE/GET)
- tests/test_vvt_routes.py: 18 Tests (alle grün)

Phase 3 — Document Generator PDF-Export:
- document-generator/page.tsx: "Als PDF exportieren"-Button funktioniert jetzt
  via window.print() + Print-Window mit korrektem HTML
- Fallback-Banner wenn Template-Service (breakpilot-core) nicht erreichbar

Phase 4 — Source Policy erweiterte Filter:
- SourcesTab.tsx: source_type-Filter (Rechtlich / Leitlinien / Vorlagen / etc.)
- PIIRulesTab.tsx: category-Filter (E-Mail / Telefon / IBAN / etc.)
- source_policy_router.py: Backend-Endpoints unterstützen jetzt source_type
  und category als Query-Parameter
- requirements.txt: reportlab==4.2.5 ergänzt (fehlende Audit-PDF-Dependency)

Phase 2 — Training (Migration-Skripte):
- scripts/apply_training_migrations.sh: SSH-Skript für Mac Mini
- scripts/apply_vvt_migration.sh: Vollständiges Deploy-Skript für VVT

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend-compliance/compliance/api/source_policy_router.py

@@ -148,12 +148,18 @@ def _source_to_dict(source: AllowedSourceDB) -> dict:
 @router.get("/sources")
 async def list_sources(
     active_only: bool = Query(False),
+    source_type: Optional[str] = Query(None),
+    license: Optional[str] = Query(None),
     db: Session = Depends(get_db),
 ):
-    """List all allowed sources."""
+    """List all allowed sources with optional filters."""
     query = db.query(AllowedSourceDB)
     if active_only:
         query = query.filter(AllowedSourceDB.active == True)
+    if source_type:
+        query = query.filter(AllowedSourceDB.source_type == source_type)
+    if license:
+        query = query.filter(AllowedSourceDB.license == license)
     sources = query.order_by(AllowedSourceDB.name).all()
     return {
         "sources": [
@@ -328,9 +334,15 @@ async def update_operation(
 # =============================================================================
 
 @router.get("/pii-rules")
-async def list_pii_rules(db: Session = Depends(get_db)):
-    """List all PII rules."""
-    rules = db.query(PIIRuleDB).order_by(PIIRuleDB.category, PIIRuleDB.name).all()
+async def list_pii_rules(
+    category: Optional[str] = Query(None),
+    db: Session = Depends(get_db),
+):
+    """List all PII rules with optional category filter."""
+    query = db.query(PIIRuleDB)
+    if category:
+        query = query.filter(PIIRuleDB.category == category)
+    rules = query.order_by(PIIRuleDB.category, PIIRuleDB.name).all()
     return {
         "rules": [
             {