feat(sdk): Kunden-Dokumente + CRA-Meldewesen, Screening aus Frontend genommen

- /sdk/dokumente: Kundensicht nur auf veroeffentlichte Rechtsdokumente
  (Ansehen + Download); Proxy mit Allow-List nur /public — Templates/Drafts/
  Generator bleiben unerreichbar.
- /sdk/cra-meldewesen: CRA Art. 14 Meldewesen (24h/72h/14d-Kaskade) mit
  Fristen-Tracking + ENISA-SRP-Export-Entwurf (kein Live-API). Backend:
  cra_meldewesen (pure, getestet) + cra_incident_store (schema-neutral ueber
  compliance_cra_documents) + /api/v1/cra/incidents (additiv, contract-safe).
- Screening (Self-Scan) aus dem Frontend genommen: Flow-Stepper-Eintrag
  ausgeblendet (visibleWhen), Dashboard-Kachel + Import-Button entfernt.
  Repo-Scanning laeuft extern im Compliance-Scanner; Backend-Router bleibt
  vorerst gemountet (Contract-Stabilitaet).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

backend-compliance/main.py

@@ -58,6 +58,7 @@ from compliance.api.vendor_assessment_routes import router as vendor_assessment_
 from compliance.api.cra_routes import router as cra_router
 from compliance.api.cra_assess_routes import router as cra_assess_router
 from compliance.api.cra_progress_routes import router as cra_progress_router
+from compliance.api.cra_incident_routes import router as cra_incident_router
 from compliance.api.cra_link_routes import router as cra_link_router
 from compliance.api.quaidal_routes import router as quaidal_router
 
@@ -150,6 +151,9 @@ app.include_router(source_policy_router, prefix="/api")
 app.include_router(import_router, prefix="/api")
 
 # System Screening (SBOM generation, vulnerability scan)
+# Screening (Self-Scan) ist aus dem Frontend genommen (Repo-Scanning läuft extern im
+# Compliance-Scanner). Backend-Router bleibt vorerst gemountet (Contract-Stabilität);
+# Demount/Archivierung erst, wenn der externe Scanner SBOM/CVE/DAST voll liefert.
 app.include_router(screening_router, prefix="/api")
 
 # Company Profile (CRUD with audit logging)
@@ -176,6 +180,7 @@ app.include_router(vendor_assessment_router, prefix="/api")
 app.include_router(cra_router, prefix="/api")
 app.include_router(cra_assess_router, prefix="/api")
 app.include_router(cra_progress_router, prefix="/api")
+app.include_router(cra_incident_router, prefix="/api")
 app.include_router(cra_link_router, prefix="/api")
 app.include_router(quaidal_router, prefix="/api")