fix: 3 weitere Router-Import-Fehler aus Refactoring

dsfa_routes: fehlender List Import (typing)
evidence_routes: try-Block ohne except/finally (SyntaxError)
vvt_routes: fehlender VVTActivityDB Import

Erwartet: 41/41 sub-routers laden (vorher 37/41, dann 38/41)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

backend-compliance/compliance/api/dsfa_routes.py

@@ -24,7 +24,7 @@ versions). Module-level helpers re-exported for legacy tests.
 """
 
 import logging
-from typing import Any, Optional
+from typing import Any, List, Optional
 
 from fastapi import APIRouter, Depends, Query
 from pydantic import BaseModel

backend-compliance/compliance/api/evidence_routes.py

@@ -541,6 +541,9 @@ def _update_risks(db: Session, *, source: str, control_id: str, ci_job_id: str,
             findings=findings_detail,
         )
 
+        return risk_update_result
+    except Exception:
+        return None
 
 # ============================================================================
 # CI/CD Evidence Collection

backend-compliance/compliance/api/vvt_routes.py

@@ -37,6 +37,7 @@ from compliance.schemas.vvt import (
     VVTOrganizationUpdate,
     VVTStatsResponse,
 )
+from compliance.db.vvt_models import VVTActivityDB
 from compliance.services.vvt_service import (
     VVTService,
     _activity_to_response,  # re-exported for legacy test imports