refactor: Paket 2 Analyse umstrukturiert + AI Act/Evidence verschoben

Paket 2 Analyse (vorher 7 Steps → jetzt 5):
  1. Requirements — Pruefaspekte aus Regulierungen
  2. Controls — Technische & organisatorische Massnahmen
  3. Risk Matrix — Risikobewertung (vorher #4, jetzt #3)
  4. Audit Checklist — Pruefbare Checkliste (vorher #6)
  5. Audit Report — Zusammenfassender Report (vorher #7)

Verschoben:
- AI Act → Paket 1 Vorbereitung (optional, nur bei KI-Einsatz)
- Evidence → Paket 5 Betrieb (Nachweise laufend sammeln, nicht einmalig)

SDK Flow (steps-*.ts) synchronisiert mit neuer Reihenfolge.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

admin-compliance/lib/sdk/types/sdk-steps.ts

@@ -57,6 +57,19 @@ export const SDK_STEPS: SDKStep[] = [
     isOptional: true,
     visibleWhen: (state) => state.customerType === 'existing',
   },
+  {
+    id: 'ai-act',
+    seq: 350,
+    phase: 1,
+    package: 'vorbereitung',
+    order: 4,
+    name: 'AI Act Klassifizierung',
+    nameShort: 'AI Act',
+    description: 'KI-Risikostufe (nur bei KI-Einsatz)',
+    url: '/sdk/ai-act',
+    checkpointId: 'CP-AI',
+    prerequisiteSteps: ['use-case-assessment'],
+    isOptional: true },
   {
     id: 'screening',
     seq: 500,
@@ -97,7 +110,7 @@ export const SDK_STEPS: SDKStep[] = [
     prerequisiteSteps: ['use-case-assessment'],
     isOptional: true },
 
-  // PAKET 2: ANALYSE (Assessment)
+  // PAKET 2: ANALYSE (Assessment) — Requirements → Controls → Risks → Checklist → Report
   {
     id: 'requirements',
     seq: 1000,
@@ -106,7 +119,7 @@ export const SDK_STEPS: SDKStep[] = [
     order: 1,
     name: 'Requirements',
     nameShort: 'Anforderungen',
-    description: 'Pr\u00fcfaspekte aus Regulierungen ableiten',
+    description: 'Pruefaspekte aus Regulierungen ableiten',
     url: '/sdk/requirements',
     checkpointId: 'CP-REQ',
     prerequisiteSteps: ['compliance-scope'],
@@ -119,72 +132,46 @@ export const SDK_STEPS: SDKStep[] = [
     order: 2,
     name: 'Controls',
     nameShort: 'Controls',
-    description: 'Erforderliche Ma\u00dfnahmen ermitteln',
+    description: 'Technische & organisatorische Massnahmen',
     url: '/sdk/controls',
     checkpointId: 'CP-CTRL',
     prerequisiteSteps: ['requirements'],
     isOptional: false },
   {
-    id: 'evidence',
+    id: 'risks',
     seq: 1200,
     phase: 1,
     package: 'analyse',
     order: 3,
-    name: 'Evidence',
-    nameShort: 'Nachweise',
-    description: 'Nachweise dokumentieren',
-    url: '/sdk/evidence',
-    checkpointId: 'CP-EVI',
+    name: 'Risk Matrix',
+    nameShort: 'Risiken',
+    description: 'Risikobewertung — wo sind Luecken?',
+    url: '/sdk/risks',
+    checkpointId: 'CP-RISK',
     prerequisiteSteps: ['controls'],
     isOptional: false },
   {
-    id: 'risks',
+    id: 'audit-checklist',
     seq: 1300,
     phase: 1,
     package: 'analyse',
     order: 4,
-    name: 'Risk Matrix',
-    nameShort: 'Risiken',
-    description: 'Risikobewertung & Residual Risk',
-    url: '/sdk/risks',
-    checkpointId: 'CP-RISK',
-    prerequisiteSteps: ['evidence'],
+    name: 'Audit Checklist',
+    nameShort: 'Checklist',
+    description: 'Pruefbare Checkliste generieren',
+    url: '/sdk/audit-checklist',
+    checkpointId: 'CP-CHK',
+    prerequisiteSteps: ['risks'],
     isOptional: false },
   {
-    id: 'ai-act',
+    id: 'audit-report',
     seq: 1400,
     phase: 1,
     package: 'analyse',
     order: 5,
-    name: 'AI Act Klassifizierung',
-    nameShort: 'AI Act',
-    description: 'Risikostufe nach EU AI Act',
-    url: '/sdk/ai-act',
-    checkpointId: 'CP-AI',
-    prerequisiteSteps: ['risks'],
-    isOptional: false },
-  {
-    id: 'audit-checklist',
-    seq: 1500,
-    phase: 1,
-    package: 'analyse',
-    order: 6,
-    name: 'Audit Checklist',
-    nameShort: 'Checklist',
-    description: 'Pr\u00fcfliste generieren',
-    url: '/sdk/audit-checklist',
-    checkpointId: 'CP-CHK',
-    prerequisiteSteps: ['ai-act'],
-    isOptional: false },
-  {
-    id: 'audit-report',
-    seq: 1600,
-    phase: 1,
-    package: 'analyse',
-    order: 7,
     name: 'Audit Report',
     nameShort: 'Report',
-    description: 'Audit-Sitzungen & PDF-Report',
+    description: 'Zusammenfassender Audit-Report (PDF)',
     url: '/sdk/audit-report',
     checkpointId: 'CP-AREP',
     prerequisiteSteps: ['audit-checklist'],
@@ -334,6 +321,19 @@ export const SDK_STEPS: SDKStep[] = [
     isOptional: false },
 
   // PAKET 5: BETRIEB (Operations)
+  {
+    id: 'evidence',
+    seq: 3900,
+    phase: 2,
+    package: 'betrieb',
+    order: 0,
+    name: 'Evidence',
+    nameShort: 'Nachweise',
+    description: 'Nachweise laufend dokumentieren',
+    url: '/sdk/evidence',
+    checkpointId: 'CP-EVI',
+    prerequisiteSteps: ['audit-report'],
+    isOptional: false },
   {
     id: 'dsr',
     seq: 4000,