feat(sdk): Kunden-Dokumente + CRA-Meldewesen, Screening aus Frontend genommen

- /sdk/dokumente: Kundensicht nur auf veroeffentlichte Rechtsdokumente
  (Ansehen + Download); Proxy mit Allow-List nur /public — Templates/Drafts/
  Generator bleiben unerreichbar.
- /sdk/cra-meldewesen: CRA Art. 14 Meldewesen (24h/72h/14d-Kaskade) mit
  Fristen-Tracking + ENISA-SRP-Export-Entwurf (kein Live-API). Backend:
  cra_meldewesen (pure, getestet) + cra_incident_store (schema-neutral ueber
  compliance_cra_documents) + /api/v1/cra/incidents (additiv, contract-safe).
- Screening (Self-Scan) aus dem Frontend genommen: Flow-Stepper-Eintrag
  ausgeblendet (visibleWhen), Dashboard-Kachel + Import-Button entfernt.
  Repo-Scanning laeuft extern im Compliance-Scanner; Backend-Router bleibt
  vorerst gemountet (Contract-Stabilitaet).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

admin-compliance/components/sdk/Sidebar/SidebarModuleList.tsx

@@ -54,6 +54,7 @@ const I = {
   portfolio: 'M19 11H5m14 0a2 2 0 012 2v6a2 2 0 01-2 2H5a2 2 0 01-2-2v-6a2 2 0 012-2m14 0V9a2 2 0 00-2-2M5 11V9a2 2 0 012-2m0 0V5a2 2 0 012-2h6a2 2 0 012 2v2M7 7h10',
   roadmap: 'M9 17V7m0 10a2 2 0 01-2 2H5a2 2 0 01-2-2V7a2 2 0 012-2h2a2 2 0 012 2m0 10a2 2 0 002 2h2a2 2 0 002-2M9 7a2 2 0 012-2h2a2 2 0 012 2m0 10V7m0 10a2 2 0 002 2h2a2 2 0 002-2V7a2 2 0 00-2-2h-2a2 2 0 00-2 2',
   code: 'M10 20l4-16m4 4l4 4-4 4M6 16l-4-4 4-4',
+  doc: 'M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z',
 }
 
 function SectionHeader({ label, collapsed, tone = 'gray' }: { label: string; collapsed: boolean; tone?: 'gray' | 'indigo' | 'purple' | 'slate' }) {
@@ -86,6 +87,7 @@ export function SidebarModuleList({ collapsed, projectId, pendingCRCount }: Side
         {item('/sdk/gap-analysis', I.barChart, 'Gap-Analyse', true)}
         {item('/sdk/iace', I.iace, 'Maschinensicherheit (CE)', true)}
         {item('/sdk/cra', I.shieldCheck, 'Cyber Resilience (CRA)', true)}
+        {item('/sdk/cra-meldewesen', I.warning, 'CRA-Meldewesen', true)}
       </div>
 
       {/* KI-Compliance */}
@@ -105,9 +107,10 @@ export function SidebarModuleList({ collapsed, projectId, pendingCRCount }: Side
         {item('/sdk/cookie-banner/preview', I.eyeCircle, 'Cookie Live-Vorschau')}
       </div>
 
-      {/* Verträge & Audit */}
+      {/* Dokumente & Verträge */}
       <div className="border-t border-gray-100 py-2">
-        <SectionHeader label="Verträge & Audit" collapsed={collapsed} />
+        <SectionHeader label="Dokumente & Verträge" collapsed={collapsed} />
+        {item('/sdk/dokumente', I.doc, 'Dokumente', true)}
         {item('/sdk/vendor-assessment', I.clipboardCheck, 'Vertragspruefung', true)}
         {item('/sdk/audit-timeline', I.clock, 'Audit Timeline', true)}
       </div>