fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

- Ruff: 144 auto-fixes (unused imports, == None → is None), F821/F811/F841 manuell
- CVEs: python-multipart>=0.0.22, weasyprint>=68.0, pillow>=12.1.1, npm audit fix (0 vulns)
- TS: 5 tote Drafting-Engine-Dateien entfernt, allowed-facts/sanitizer/StepHeader/context fixes
- Tests: +104 (ISMS 58, Evidence 18, VVT 14, Generation 14) → 1449 passed
- Refactoring: collect_ci_evidence (F→A), row_to_response (E→A), extract_requirements (E→A)
- Dead Code: pca-platform, 7 Go-Handler, dsr_api.py, duplicate Schemas entfernt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/internal/api/handlers/reporting_handlers.go

@@ -1,97 +0,0 @@
-package handlers
-
-import (
-	"net/http"
-
-	"github.com/breakpilot/ai-compliance-sdk/internal/rbac"
-	"github.com/breakpilot/ai-compliance-sdk/internal/reporting"
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-type ReportingHandlers struct {
-	store *reporting.Store
-}
-
-func NewReportingHandlers(store *reporting.Store) *ReportingHandlers {
-	return &ReportingHandlers{store: store}
-}
-
-// GetExecutiveReport generates a comprehensive compliance report
-// GET /sdk/v1/reporting/executive
-func (h *ReportingHandlers) GetExecutiveReport(c *gin.Context) {
-	tenantID := rbac.GetTenantID(c)
-	if tenantID == uuid.Nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": "tenant ID required"})
-		return
-	}
-
-	report, err := h.store.GenerateReport(c.Request.Context(), tenantID)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
-		return
-	}
-
-	c.JSON(http.StatusOK, report)
-}
-
-// GetComplianceScore returns just the overall compliance score
-// GET /sdk/v1/reporting/score
-func (h *ReportingHandlers) GetComplianceScore(c *gin.Context) {
-	tenantID := rbac.GetTenantID(c)
-	if tenantID == uuid.Nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": "tenant ID required"})
-		return
-	}
-
-	report, err := h.store.GenerateReport(c.Request.Context(), tenantID)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
-		return
-	}
-
-	c.JSON(http.StatusOK, gin.H{
-		"compliance_score": report.ComplianceScore,
-		"risk_level":       report.RiskOverview.OverallLevel,
-		"generated_at":     report.GeneratedAt,
-	})
-}
-
-// GetUpcomingDeadlines returns deadlines across all modules
-// GET /sdk/v1/reporting/deadlines
-func (h *ReportingHandlers) GetUpcomingDeadlines(c *gin.Context) {
-	tenantID := rbac.GetTenantID(c)
-	if tenantID == uuid.Nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": "tenant ID required"})
-		return
-	}
-
-	report, err := h.store.GenerateReport(c.Request.Context(), tenantID)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
-		return
-	}
-
-	c.JSON(http.StatusOK, gin.H{
-		"deadlines": report.UpcomingDeadlines,
-		"total":     len(report.UpcomingDeadlines),
-	})
-}
-
-// GetRiskOverview returns the aggregated risk assessment
-// GET /sdk/v1/reporting/risks
-func (h *ReportingHandlers) GetRiskOverview(c *gin.Context) {
-	tenantID := rbac.GetTenantID(c)
-	if tenantID == uuid.Nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": "tenant ID required"})
-		return
-	}
-
-	report, err := h.store.GenerateReport(c.Request.Context(), tenantID)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
-		return
-	}
-
-	c.JSON(http.StatusOK, report.RiskOverview)
-}