fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

- Ruff: 144 auto-fixes (unused imports, == None → is None), F821/F811/F841 manuell
- CVEs: python-multipart>=0.0.22, weasyprint>=68.0, pillow>=12.1.1, npm audit fix (0 vulns)
- TS: 5 tote Drafting-Engine-Dateien entfernt, allowed-facts/sanitizer/StepHeader/context fixes
- Tests: +104 (ISMS 58, Evidence 18, VVT 14, Generation 14) → 1449 passed
- Refactoring: collect_ci_evidence (F→A), row_to_response (E→A), extract_requirements (E→A)
- Dead Code: pca-platform, 7 Go-Handler, dsr_api.py, duplicate Schemas entfernt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-compliance/lib/sdk/tom-generator/context.tsx

@@ -554,6 +554,15 @@ export function TOMGeneratorProvider({
     []
   )
 
+  const bulkUpdateTOMs = useCallback(
+    (updates: Array<{ id: string; data: Partial<DerivedTOM> }>) => {
+      for (const { id, data } of updates) {
+        dispatch({ type: 'UPDATE_DERIVED_TOM', payload: { id, data } })
+      }
+    },
+    []
+  )
+
   // Gap analysis
   const runGapAnalysis = useCallback(() => {
     if (!rulesEngineRef.current) return
@@ -666,6 +675,7 @@ export function TOMGeneratorProvider({
 
     deriveTOMs,
     updateDerivedTOM,
+    bulkUpdateTOMs,
 
     runGapAnalysis,