fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

- Ruff: 144 auto-fixes (unused imports, == None → is None), F821/F811/F841 manuell
- CVEs: python-multipart>=0.0.22, weasyprint>=68.0, pillow>=12.1.1, npm audit fix (0 vulns)
- TS: 5 tote Drafting-Engine-Dateien entfernt, allowed-facts/sanitizer/StepHeader/context fixes
- Tests: +104 (ISMS 58, Evidence 18, VVT 14, Generation 14) → 1449 passed
- Refactoring: collect_ci_evidence (F→A), row_to_response (E→A), extract_requirements (E→A)
- Dead Code: pca-platform, 7 Go-Handler, dsr_api.py, duplicate Schemas entfernt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-compliance/compliance/api/routes.py

@@ -16,11 +16,10 @@ import logging
 
 logger = logging.getLogger(__name__)
 import os
-from datetime import datetime, timedelta
-from typing import Optional, List
+from datetime import datetime
+from typing import Optional
 
-from pydantic import BaseModel
-from fastapi import APIRouter, Depends, HTTPException, UploadFile, File, Query, BackgroundTasks
+from fastapi import APIRouter, Depends, HTTPException, Query, BackgroundTasks
 from fastapi.responses import FileResponse
 from sqlalchemy.orm import Session
 
@@ -31,22 +30,16 @@ from ..db import (
     RequirementRepository,
     ControlRepository,
     EvidenceRepository,
-    RiskRepository,
-    AuditExportRepository,
     ControlStatusEnum,
     ControlDomainEnum,
-    RiskLevelEnum,
-    EvidenceStatusEnum,
 )
 from ..db.models import EvidenceDB, ControlDB
 from ..services.seeder import ComplianceSeeder
 from ..services.export_generator import AuditExportGenerator
-from ..services.auto_risk_updater import AutoRiskUpdater, ScanType
 from .schemas import (
-    RegulationCreate, RegulationResponse, RegulationListResponse,
+    RegulationResponse, RegulationListResponse,
     RequirementCreate, RequirementResponse, RequirementListResponse,
-    ControlCreate, ControlUpdate, ControlResponse, ControlListResponse, ControlReviewRequest,
-    MappingCreate, MappingResponse, MappingListResponse,
+    ControlUpdate, ControlResponse, ControlListResponse, ControlReviewRequest,
     ExportRequest, ExportResponse, ExportListResponse,
     SeedRequest, SeedResponse,
     # Pagination schemas
@@ -381,7 +374,6 @@ async def delete_requirement(requirement_id: str, db: Session = Depends(get_db))
 async def update_requirement(requirement_id: str, updates: dict, db: Session = Depends(get_db)):
     """Update a requirement with implementation/audit details."""
     from ..db.models import RequirementDB
-    from datetime import datetime
 
     requirement = db.query(RequirementDB).filter(RequirementDB.id == requirement_id).first()
     if not requirement:
@@ -870,8 +862,8 @@ async def init_tables(db: Session = Depends(get_db)):
     """Create compliance tables if they don't exist."""
     from classroom_engine.database import engine
     from ..db.models import (
-        RegulationDB, RequirementDB, ControlDB, ControlMappingDB,
-        EvidenceDB, RiskDB, AuditExportDB, AISystemDB
+        RegulationDB, RequirementDB, ControlMappingDB,
+        RiskDB, AuditExportDB, AISystemDB
     )
 
     try:
@@ -971,8 +963,8 @@ async def seed_database(
     """Seed the compliance database with initial data."""
     from classroom_engine.database import engine
     from ..db.models import (
-        RegulationDB, RequirementDB, ControlDB, ControlMappingDB,
-        EvidenceDB, RiskDB, AuditExportDB
+        RegulationDB, RequirementDB, ControlMappingDB,
+        RiskDB, AuditExportDB
     )
 
     try: