merge: phases 1–5 refactor, CI hardening, docs (coolify → main)

Phase 1: backend-compliance — partial service-layer extraction
Phase 2: ai-compliance-sdk — full hexagonal split; iace/ucca/training handlers
  and stores split into focused files; cmd/server/main.go → internal/app/
Phase 3: admin-compliance — types.ts, tom-generator loader, and major page
  components split; lib document generators extracted
Phase 4: dsms-gateway, consent-sdk, developer-portal, breakpilot-compliance-sdk
Phase 5 CI hardening:
  - loc-budget job now scans whole repo (blocking, no || true)
  - sbom-scan / grype blocking on high+ CVEs
  - ai-compliance-sdk/.golangci.yml: strict golangci-lint config
  - check-loc.sh: skip test_*.py and *.html; loc-exceptions.txt expanded
  - deleted stray routes.py.backup (2512 LOC)
Docs:
  - root README.md with CI badge, service table, quick start, CI pipeline table
  - CONTRIBUTING.md: setup, pre-commit checklist, guardrail marker reference
  - CLAUDE.md: First-Time Setup & Claude Code Onboarding section
  - all 7 service READMEs updated (stale phase refs, current architecture)
  - AGENTS.go/python/typescript.md enhanced with linting, DI, barrel re-export
  - .gitignore: dist/, .turbo/, pnpm-lock.yaml added

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

admin-compliance/app/sdk/iace/[projectId]/mitigations/page.tsx

@@ -1,20 +1,50 @@
 'use client'
 
+import { useState } from 'react'
 import { useParams } from 'next/navigation'
 import { REDUCTION_TYPES } from './_components/types'
 import { HierarchyWarning } from './_components/HierarchyWarning'
-import { MitigationForm } from './_components/MitigationForm'
-import { MitigationCard } from './_components/MitigationCard'
 import { MeasuresLibraryModal } from './_components/MeasuresLibraryModal'
 import { SuggestMeasuresModal } from './_components/SuggestMeasuresModal'
+import { MitigationForm } from './_components/MitigationForm'
+import { MitigationCard } from './_components/MitigationCard'
+import { ProtectiveMeasure } from './_components/types'
 import { useMitigations } from './_hooks/useMitigations'
 
 export default function MitigationsPage() {
   const params = useParams()
   const projectId = params.projectId as string
-  const m = useMitigations(projectId)
 
-  if (m.loading) {
+  const {
+    hazards, loading, hierarchyWarning, setHierarchyWarning,
+    measures, byType,
+    fetchMeasuresLibrary, handleSubmit, handleAddSuggestedMeasure, handleVerify, handleDelete,
+  } = useMitigations(projectId)
+
+  const [showForm, setShowForm] = useState(false)
+  const [preselectedType, setPreselectedType] = useState<'design' | 'protection' | 'information' | undefined>()
+  const [showLibrary, setShowLibrary] = useState(false)
+  const [libraryFilter, setLibraryFilter] = useState<string | undefined>()
+  const [showSuggest, setShowSuggest] = useState(false)
+
+  function handleOpenLibrary(type?: string) {
+    setLibraryFilter(type)
+    fetchMeasuresLibrary(type)
+    setShowLibrary(true)
+  }
+
+  function handleSelectMeasure(measure: ProtectiveMeasure) {
+    setShowLibrary(false)
+    setShowForm(true)
+    setPreselectedType(measure.reduction_type as 'design' | 'protection' | 'information')
+  }
+
+  function handleAddForType(type: 'design' | 'protection' | 'information') {
+    setPreselectedType(type)
+    setShowForm(true)
+  }
+
+  if (loading) {
     return (
       <div className="flex items-center justify-center h-64">
         <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-purple-600" />
@@ -49,8 +79,10 @@ export default function MitigationsPage() {
             </svg>
             Bibliothek
           </button>
-          <button onClick={() => { m.setPreselectedType(undefined); m.setShowForm(true) }}
-            className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors">
+          <button
+            onClick={() => { setPreselectedType(undefined); setShowForm(true) }}
+            className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors"
+          >
             <svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
               <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 6v6m0 0v6m0-6h6m-6 0H6" />
             </svg>
@@ -59,25 +91,29 @@ export default function MitigationsPage() {
         </div>
       </div>
 
-      {m.hierarchyWarning && <HierarchyWarning onDismiss={() => m.setHierarchyWarning(false)} />}
+      {hierarchyWarning && <HierarchyWarning onDismiss={() => setHierarchyWarning(false)} />}
 
-      {m.showForm && (
+      {showForm && (
         <MitigationForm
-          onSubmit={m.handleSubmit}
-          onCancel={() => { m.setShowForm(false); m.setPreselectedType(undefined) }}
-          hazards={m.hazards} preselectedType={m.preselectedType}
-          onOpenLibrary={m.handleOpenLibrary}
+          onSubmit={async (data) => {
+            const ok = await handleSubmit(data)
+            if (ok) { setShowForm(false); setPreselectedType(undefined) }
+          }}
+          onCancel={() => { setShowForm(false); setPreselectedType(undefined) }}
+          hazards={hazards}
+          preselectedType={preselectedType}
+          onOpenLibrary={handleOpenLibrary}
         />
       )}
 
-      {m.showLibrary && (
+      {showLibrary && (
         <MeasuresLibraryModal
           measures={m.measures} onSelect={m.handleSelectMeasure}
           onClose={() => m.setShowLibrary(false)} filterType={m.libraryFilter}
         />
       )}
 
-      {m.showSuggest && (
+      {showSuggest && (
         <SuggestMeasuresModal
           hazards={m.hazards} projectId={projectId}
           onAddMeasure={m.handleAddSuggestedMeasure}
@@ -108,8 +144,8 @@ export default function MitigationsPage() {
                 ))}
               </div>
               <div className="space-y-3">
-                {items.map((item) => (
-                  <MitigationCard key={item.id} mitigation={item} onVerify={m.handleVerify} onDelete={m.handleDelete} />
+                {items.map((m) => (
+                  <MitigationCard key={m.id} mitigation={m} onVerify={handleVerify} onDelete={handleDelete} />
                 ))}
               </div>
               <div className="mt-3 flex gap-2">