feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

- 9 Regulation-JSON-Dateien (DSGVO 80, AI Act 60, NIS2 40, BDSG 30, TTDSG 20, DSA 35, Data Act 25, EU-Maschinen 15, DORA 20)
- Condition-Tree-Engine fuer automatische Pflichtenselektion (all_of/any_of, 80+ Field-Paths)
- Generischer JSONRegulationModule-Loader mit YAML-Fallback
- Bidirektionales TOM-Control-Mapping (291 Obligation→Control, 92 Control→Obligation)
- Gap-Analyse-Engine (Compliance-%, Priority Actions, Domain Breakdown)
- ScopeDecision→UnifiedFacts Bridge fuer Auto-Profiling
- 4 neue API-Endpoints (assess-from-scope, tom-controls, gap-analysis, reverse-lookup)
- Frontend: Auto-Profiling Button, Regulation-Filter Chips, TOM-Panel, Gap-Analyse-View
- 18 Unit Tests (Condition Engine, v2 Loader, TOM Mapper)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/cmd/server/main.go

@@ -123,6 +123,10 @@ func main() {
 	trainingHandlers := handlers.NewTrainingHandlers(trainingStore, contentGenerator)
 	ragHandlers := handlers.NewRAGHandlers(corpusVersionStore)
 
+	// Initialize obligations framework (v2 with TOM mapping)
+	obligationsStore := ucca.NewObligationsStore(pool)
+	obligationsHandlers := handlers.NewObligationsHandlersWithStore(obligationsStore)
+
 	// Initialize middleware
 	rbacMiddleware := rbac.NewMiddleware(rbacService, policyEngine)
 
@@ -346,6 +350,9 @@ func main() {
 			// DSB Pool management
 			uccaRoutes.GET("/dsb-pool", escalationHandlers.ListDSBPool)
 			uccaRoutes.POST("/dsb-pool", escalationHandlers.AddDSBPoolMember)
+
+			// Obligations framework (v2 with TOM mapping)
+			obligationsHandlers.RegisterRoutes(uccaRoutes)
 		}
 
 		// RAG routes - Legal Corpus Search & Versioning