merge: phases 1–5 refactor, CI hardening, docs (coolify → main)

Phase 1: backend-compliance — partial service-layer extraction
Phase 2: ai-compliance-sdk — full hexagonal split; iace/ucca/training handlers
  and stores split into focused files; cmd/server/main.go → internal/app/
Phase 3: admin-compliance — types.ts, tom-generator loader, and major page
  components split; lib document generators extracted
Phase 4: dsms-gateway, consent-sdk, developer-portal, breakpilot-compliance-sdk
Phase 5 CI hardening:
  - loc-budget job now scans whole repo (blocking, no || true)
  - sbom-scan / grype blocking on high+ CVEs
  - ai-compliance-sdk/.golangci.yml: strict golangci-lint config
  - check-loc.sh: skip test_*.py and *.html; loc-exceptions.txt expanded
  - deleted stray routes.py.backup (2512 LOC)
Docs:
  - root README.md with CI badge, service table, quick start, CI pipeline table
  - CONTRIBUTING.md: setup, pre-commit checklist, guardrail marker reference
  - CLAUDE.md: First-Time Setup & Claude Code Onboarding section
  - all 7 service READMEs updated (stale phase refs, current architecture)
  - AGENTS.go/python/typescript.md enhanced with linting, DI, barrel re-export
  - .gitignore: dist/, .turbo/, pnpm-lock.yaml added

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

admin-compliance/app/sdk/control-provenance/page.tsx

@@ -1,10 +1,10 @@
 'use client'
 
 import { useState, useEffect } from 'react'
-import { Shield, FileText } from 'lucide-react'
+import { FileText, Shield } from 'lucide-react'
 import Link from 'next/link'
-import { PROVENANCE_SECTIONS } from './_data/provenance-sections'
-import { MarkdownRenderer } from './_components/MarkdownRenderer'
+import { PROVENANCE_SECTIONS } from './_components/provenance-data'
+import { MarkdownRenderer } from './_components/ProvenanceHelpers'
 import { LicenseMatrix } from './_components/LicenseMatrix'
 import { SourceRegistry } from './_components/SourceRegistry'
 
@@ -91,7 +91,9 @@ export default function ControlProvenancePage() {
                   key={id}
                   onClick={() => setActiveSection(id)}
                   className={`w-full text-left px-3 py-2 rounded-lg text-sm transition-colors ${
-                    activeSection === id ? 'bg-green-100 text-green-900 font-medium' : 'text-gray-700 hover:bg-gray-100'
+                    activeSection === id
+                      ? 'bg-green-100 text-green-900 font-medium'
+                      : 'text-gray-700 hover:bg-gray-100'
                   }`}
                 >
                   {id === 'license-matrix' ? 'Lizenz-Matrix' : 'Quellenregister'}
@@ -112,8 +114,12 @@ export default function ControlProvenancePage() {
                 </div>
               </div>
             )}
-            {activeSection === 'license-matrix' && <LicenseMatrix licenses={licenses} loading={loading} />}
-            {activeSection === 'source-registry' && <SourceRegistry sources={sources} loading={loading} />}
+            {activeSection === 'license-matrix' && (
+              <LicenseMatrix licenses={licenses} loading={loading} />
+            )}
+            {activeSection === 'source-registry' && (
+              <SourceRegistry sources={sources} loading={loading} />
+            )}
           </div>
         </div>
       </div>