fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

- Ruff: 144 auto-fixes (unused imports, == None → is None), F821/F811/F841 manuell
- CVEs: python-multipart>=0.0.22, weasyprint>=68.0, pillow>=12.1.1, npm audit fix (0 vulns)
- TS: 5 tote Drafting-Engine-Dateien entfernt, allowed-facts/sanitizer/StepHeader/context fixes
- Tests: +104 (ISMS 58, Evidence 18, VVT 14, Generation 14) → 1449 passed
- Refactoring: collect_ci_evidence (F→A), row_to_response (E→A), extract_requirements (E→A)
- Dead Code: pca-platform, 7 Go-Handler, dsr_api.py, duplicate Schemas entfernt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-compliance/compliance/api/source_policy_router.py

@@ -21,9 +21,8 @@ Endpoints:
   GET    /api/v1/admin/compliance-report    — Compliance report
 """
 
-import uuid
 from datetime import datetime
-from typing import Optional, List
+from typing import Optional
 
 from fastapi import APIRouter, HTTPException, Depends, Query
 from pydantic import BaseModel, Field
@@ -155,7 +154,7 @@ async def list_sources(
     """List all allowed sources with optional filters."""
     query = db.query(AllowedSourceDB)
     if active_only:
-        query = query.filter(AllowedSourceDB.active == True)
+        query = query.filter(AllowedSourceDB.active)
     if source_type:
         query = query.filter(AllowedSourceDB.source_type == source_type)
     if license:
@@ -527,8 +526,8 @@ async def get_policy_audit(
 async def get_policy_stats(db: Session = Depends(get_db)):
     """Get dashboard statistics for source policy."""
     total_sources = db.query(AllowedSourceDB).count()
-    active_sources = db.query(AllowedSourceDB).filter(AllowedSourceDB.active == True).count()
-    pii_rules = db.query(PIIRuleDB).filter(PIIRuleDB.active == True).count()
+    active_sources = db.query(AllowedSourceDB).filter(AllowedSourceDB.active).count()
+    pii_rules = db.query(PIIRuleDB).filter(PIIRuleDB.active).count()
 
     # Count blocked content entries from today
     today_start = datetime.utcnow().replace(hour=0, minute=0, second=0, microsecond=0)
@@ -550,8 +549,8 @@ async def get_policy_stats(db: Session = Depends(get_db)):
 @router.get("/compliance-report")
 async def get_compliance_report(db: Session = Depends(get_db)):
     """Generate a compliance report for source policies."""
-    sources = db.query(AllowedSourceDB).filter(AllowedSourceDB.active == True).all()
-    pii_rules = db.query(PIIRuleDB).filter(PIIRuleDB.active == True).all()
+    sources = db.query(AllowedSourceDB).filter(AllowedSourceDB.active).all()
+    pii_rules = db.query(PIIRuleDB).filter(PIIRuleDB.active).all()
 
     return {
         "report_date": datetime.utcnow().isoformat(),