fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

- Ruff: 144 auto-fixes (unused imports, == None → is None), F821/F811/F841 manuell
- CVEs: python-multipart>=0.0.22, weasyprint>=68.0, pillow>=12.1.1, npm audit fix (0 vulns)
- TS: 5 tote Drafting-Engine-Dateien entfernt, allowed-facts/sanitizer/StepHeader/context fixes
- Tests: +104 (ISMS 58, Evidence 18, VVT 14, Generation 14) → 1449 passed
- Refactoring: collect_ci_evidence (F→A), row_to_response (E→A), extract_requirements (E→A)
- Dead Code: pca-platform, 7 Go-Handler, dsr_api.py, duplicate Schemas entfernt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-compliance/app/sdk/document-generator/contextBridge.ts

@@ -515,7 +515,7 @@ export function setContextPath(ctx: TemplateContext, dotPath: string, value: unk
   return {
     ...ctx,
     [section]: {
-      ...(ctx[section] as Record<string, unknown>),
+      ...(ctx[section] as unknown as Record<string, unknown>),
       [key]: value,
     },
   }
@@ -526,6 +526,6 @@ export function setContextPath(ctx: TemplateContext, dotPath: string, value: unk
  */
 export function getContextPath(ctx: TemplateContext, dotPath: string): unknown {
   const [section, ...rest] = dotPath.split('.') as [keyof TemplateContext, ...string[]]
-  const sectionObj = ctx[section] as Record<string, unknown>
+  const sectionObj = ctx[section] as unknown as Record<string, unknown>
   return sectionObj?.[rest.join('.')]
 }