feat(tom): TOM-Backend in Python erstellen, Frontend von In-Memory auf DB migrieren

- Migration 034: compliance_tom_state + compliance_tom_measures Tabellen
- Python Routes: State CRUD, Measures CRUD, Bulk-Upsert, Stats, CSV/JSON-Export
- Frontend-Proxy: In-Memory Storage durch Proxy zu backend-compliance ersetzt
- Go TOM-Handler als DEPRECATED markiert (Source of Truth ist jetzt Python)
- 44 Tests (alle bestanden)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/internal/api/handlers/dsgvo_handlers.go

@@ -144,8 +144,12 @@ func (h *DSGVOHandlers) DeleteProcessingActivity(c *gin.Context) {
 // ============================================================================
 // TOM - Technische und Organisatorische Maßnahmen
 // ============================================================================
+// DEPRECATED: TOM is now managed by backend-compliance (Python).
+// These handlers remain for backwards compatibility but should not be used.
+// Use backend-compliance endpoints: GET/POST /api/compliance/tom/...
 
 // ListTOMs returns all TOMs for a tenant
+// DEPRECATED: Use backend-compliance GET /api/compliance/tom/measures
 func (h *DSGVOHandlers) ListTOMs(c *gin.Context) {
 	tenantID := rbac.GetTenantID(c)
 	if tenantID == uuid.Nil {
@@ -553,6 +557,7 @@ func (h *DSGVOHandlers) ExportVVT(c *gin.Context) {
 }
 
 // ExportTOM exports the TOM catalog as CSV/JSON
+// DEPRECATED: Use backend-compliance GET /api/compliance/tom/export
 func (h *DSGVOHandlers) ExportTOM(c *gin.Context) {
 	tenantID := rbac.GetTenantID(c)
 	if tenantID == uuid.Nil {