feat(tom): audit document, compliance checks, 25 controls, canonical control mapping

Phase A: TOM document HTML generator (12 sections, inline CSS, A4 print)
Phase B: TOMDocumentTab component (org-header form, revisions, print/download)
Phase C: 11 compliance checks with severity-weighted scoring
Phase D: MkDocs documentation for TOM module
Phase E: 25 new controls (63 → 88) in 13 categories

Canonical Control Mapping (three-layer architecture):
- Migration 068: tom_control_mappings + tom_control_sync_state tables
- 6 API endpoints: sync, list, by-tom, stats, manual add, delete
- Category mapping: 13 TOM categories → 17 canonical categories
- Frontend: sync button + coverage card (Overview), drill-down (Editor),
  belegende Controls count (Document)
- 20 tests (unit + API with mocked DB)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

mkdocs.yml

@@ -74,7 +74,10 @@ nav:
       - Risiken (CP-RSK): services/sdk-modules/risks.md
       - Analyse-Module (Paket 2): services/sdk-modules/analyse-module.md
       - Dokumentations-Module (Paket 3+): services/sdk-modules/dokumentations-module.md
+      - VVT (Art. 30 DSGVO): services/sdk-modules/vvt.md
+      - Loeschfristen (Loeschkonzept): services/sdk-modules/loeschfristen.md
       - DSFA (Art. 35 DSGVO): services/sdk-modules/dsfa.md
+      - TOM (Art. 32 DSGVO): services/sdk-modules/tom.md
       - Rechtliche Texte (Paket 4): services/sdk-modules/rechtliche-texte.md
       - DSR (Betroffenenrechte): services/sdk-modules/dsr.md
       - E-Mail-Templates: services/sdk-modules/email-templates.md