fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

- Ruff: 144 auto-fixes (unused imports, == None → is None), F821/F811/F841 manuell
- CVEs: python-multipart>=0.0.22, weasyprint>=68.0, pillow>=12.1.1, npm audit fix (0 vulns)
- TS: 5 tote Drafting-Engine-Dateien entfernt, allowed-facts/sanitizer/StepHeader/context fixes
- Tests: +104 (ISMS 58, Evidence 18, VVT 14, Generation 14) → 1449 passed
- Refactoring: collect_ci_evidence (F→A), row_to_response (E→A), extract_requirements (E→A)
- Dead Code: pca-platform, 7 Go-Handler, dsr_api.py, duplicate Schemas entfernt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-compliance/compliance/services/export_generator.py

@@ -189,7 +189,7 @@ class AuditExportGenerator:
         self, output_dir: Path, included_regulations: Optional[List[str]]
     ) -> None:
         """Export regulations to JSON files."""
-        query = self.db.query(RegulationDB).filter(RegulationDB.is_active == True)
+        query = self.db.query(RegulationDB).filter(RegulationDB.is_active)
         if included_regulations:
             query = query.filter(RegulationDB.code.in_(included_regulations))
 
@@ -557,7 +557,7 @@ Generiert am: """ + datetime.now().strftime("%Y-%m-%d %H:%M:%S")
     ) -> Dict[str, Any]:
         """Calculate compliance statistics."""
         # Count regulations
-        reg_query = self.db.query(RegulationDB).filter(RegulationDB.is_active == True)
+        reg_query = self.db.query(RegulationDB).filter(RegulationDB.is_active)
         if included_regulations:
             reg_query = reg_query.filter(RegulationDB.code.in_(included_regulations))
         total_regulations = reg_query.count()