feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

- 9 Regulation-JSON-Dateien (DSGVO 80, AI Act 60, NIS2 40, BDSG 30, TTDSG 20, DSA 35, Data Act 25, EU-Maschinen 15, DORA 20)
- Condition-Tree-Engine fuer automatische Pflichtenselektion (all_of/any_of, 80+ Field-Paths)
- Generischer JSONRegulationModule-Loader mit YAML-Fallback
- Bidirektionales TOM-Control-Mapping (291 Obligation→Control, 92 Control→Obligation)
- Gap-Analyse-Engine (Compliance-%, Priority Actions, Domain Breakdown)
- ScopeDecision→UnifiedFacts Bridge fuer Auto-Profiling
- 4 neue API-Endpoints (assess-from-scope, tom-controls, gap-analysis, reverse-lookup)
- Frontend: Auto-Profiling Button, Regulation-Filter Chips, TOM-Panel, Gap-Analyse-View
- 18 Unit Tests (Condition Engine, v2 Loader, TOM Mapper)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/internal/ucca/unified_facts.go

@@ -85,6 +85,11 @@ type SectorFacts struct {
 	IsPublicAdministration   bool `json:"is_public_administration"`
 	PublicAdminLevel         string `json:"public_admin_level,omitempty"` // "federal", "state", "municipal"
 
+	// NIS2 classification (v2)
+	NIS2Classification       string `json:"nis2_classification,omitempty"` // wichtige_einrichtung, besonders_wichtige_einrichtung, nicht_betroffen
+	IsAnnexI                 bool   `json:"is_annex_i"`
+	IsAnnexII                bool   `json:"is_annex_ii"`
+
 	// Healthcare specific
 	IsHealthcareProvider     bool `json:"is_healthcare_provider"`
 	HasPatientData           bool `json:"has_patient_data"`
@@ -141,6 +146,19 @@ type DataProtectionFacts struct {
 	RequiresDSBByLaw            bool `json:"requires_dsb_by_law"`
 	HasAppointedDSB             bool `json:"has_appointed_dsb"`
 	DSBIsInternal               bool `json:"dsb_is_internal"`
+
+	// Extended data categories (v2)
+	ProcessesEmployeeData       bool `json:"processes_employee_data"`
+	ProcessesFinancialData      bool `json:"processes_financial_data"`
+	ProcessesHealthData         bool `json:"processes_health_data"`
+	ProcessesBiometricData      bool `json:"processes_biometric_data"`
+
+	// Online / Platform processing (v2)
+	UsesCookies                 bool `json:"uses_cookies"`
+	UsesTracking                bool `json:"uses_tracking"`
+	UsesVideoSurveillance       bool `json:"uses_video_surveillance"`
+	OperatesPlatform            bool `json:"operates_platform"`
+	PlatformUserCount           int  `json:"platform_user_count,omitempty"`
 }
 
 // AIUsageFacts contains AI Act relevant information