feat: Rollenkonzept backend + SOP template (Phase 1-3)

- Migration 111: 3 new tables (org_roles, document_reviews, document_role_mapping)
  with seed data mapping all 71 doc types to 7 compliance roles
- org_role_routes.py: CRUD for roles, seed defaults, test email, mapping API
- document_review_routes.py: Review lifecycle (create→send→approve/reject)
  with approval notification to all affected roles
- Migration 112: SOP template (ISO 9001 structure, 21 placeholders)
- Added standard_operating_procedure to TemplateType, doc-labels, presets

[migration-approved]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

admin-compliance/app/sdk/_components/doc-labels.ts

@@ -107,6 +107,9 @@ export const DOC_LABELS: Record<string, { label: string; category: string }> = {
   ai_usage_policy: { label: 'KI-Nutzungsrichtlinie', category: 'KI & Cyber' },
   cybersecurity_policy: { label: 'Cybersecurity-Richtlinie (CRA)', category: 'KI & Cyber' },
   byod_policy: { label: 'BYOD-Richtlinie', category: 'KI & Cyber' },
+
+  // ── SOP ──────────────────────────────────────────────────────────
+  standard_operating_procedure: { label: 'Standard Operating Procedure', category: 'Prozesse' },
 }
 
 export const CATEGORY_COLORS: Record<string, string> = {
@@ -124,4 +127,5 @@ export const CATEGORY_COLORS: Record<string, string> = {
   BCM: 'bg-yellow-50 text-yellow-700',
   'KI & Cyber': 'bg-cyan-50 text-cyan-700',
   Marketing: 'bg-pink-50 text-pink-700',
+  Prozesse: 'bg-teal-50 text-teal-700',
 }

admin-compliance/lib/sdk/company-profile-preset-data.ts

@@ -224,7 +224,7 @@ export const COMPANY_PROFILE_PRESETS: CompanyProfilePreset[] = [
       'transfer_impact_assessment', 'scc_companion',
       'vendor_risk_management_policy', 'third_party_security_policy',
       'business_continuity_policy', 'disaster_recovery_policy', 'crisis_management_policy',
-      'ai_usage_policy',
+      'ai_usage_policy', 'standard_operating_procedure',
     ],
   },
   {
@@ -262,6 +262,7 @@ export const COMPANY_PROFILE_PRESETS: CompanyProfilePreset[] = [
       'vendor_risk_management_policy', 'third_party_security_policy',
       'business_continuity_policy', 'disaster_recovery_policy',
       'ai_usage_policy', 'cybersecurity_policy', 'byod_policy',
+      'standard_operating_procedure',
     ],
   },
   {
@@ -296,6 +297,7 @@ export const COMPANY_PROFILE_PRESETS: CompanyProfilePreset[] = [
       'transfer_impact_assessment', 'vendor_risk_management_policy',
       'supplier_security_policy',
       'business_continuity_policy', 'disaster_recovery_policy', 'crisis_management_policy',
+      'standard_operating_procedure',
     ],
   },
   {

admin-compliance/lib/sdk/types/document-generator.ts

@@ -85,6 +85,8 @@ export type TemplateType =
   | 'tom_documentation'
   | 'loeschkonzept'
   | 'pflichtenregister'
+  // SOP (Migration 112)
+  | 'standard_operating_procedure'
 
 export type Jurisdiction = 'DE' | 'AT' | 'CH' | 'EU' | 'US' | 'INTL'