feat(training): add Media Pipeline — TTS Audio, Presentation Video, Bulk Generation

Phase A: 8 new IT-Security training modules (SEC-PWD, SEC-DESK, SEC-KIAI,
SEC-BYOD, SEC-VIDEO, SEC-USB, SEC-INC, SEC-HOME) with CTM entries.
Bulk content and quiz generation endpoints for all 28 modules.

Phase B: Piper TTS service (Python/FastAPI) for local German speech synthesis.
training_media table, TTSClient in Go backend, audio generation endpoints,
AudioPlayer component in frontend. MinIO storage integration.

Phase C: FFmpeg presentation video pipeline — LLM generates slide scripts,
ImageMagick renders 1920x1080 slides, FFmpeg combines with audio to MP4.
VideoPlayer and ScriptPreview components in frontend.

New files: 15 created, 9 modified
- compliance-tts-service/ (Dockerfile, main.py, tts_engine.py, storage.py,
  slide_renderer.py, video_generator.py)
- migrations 014-016 (training engine, IT-security modules, media table)
- training package (models, store, content_generator, media, handlers)
- frontend (AudioPlayer, VideoPlayer, ScriptPreview, api, types, page)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/cmd/server/main.go

@@ -28,6 +28,7 @@ import (
 	"github.com/breakpilot/ai-compliance-sdk/internal/workshop"
 	"github.com/breakpilot/ai-compliance-sdk/internal/portfolio"
 	"github.com/breakpilot/ai-compliance-sdk/internal/gci"
+	"github.com/breakpilot/ai-compliance-sdk/internal/training"
 	"github.com/gin-contrib/cors"
 	"github.com/gin-gonic/gin"
 	"github.com/jackc/pgx/v5/pgxpool"
@@ -129,6 +130,11 @@ func main() {
 	gciEngine := gci.NewEngine()
 	gciHandlers := handlers.NewGCIHandlers(gciEngine)
 
+	// Initialize Training Engine
+	trainingStore := training.NewStore(pool)
+	ttsClient := training.NewTTSClient(cfg.TTSServiceURL)
+	contentGenerator := training.NewContentGenerator(providerRegistry, piiDetector, trainingStore, ttsClient)
+	trainingHandlers := handlers.NewTrainingHandlers(trainingStore, contentGenerator)
 	// Initialize middleware
 	rbacMiddleware := rbac.NewMiddleware(rbacService, policyEngine)
 
@@ -680,6 +686,63 @@ func main() {
 			gciRoutes.GET("/iso/mappings/:controlId", gciHandlers.GetISOMapping)
 		}
 
+
+				// Training Engine routes - Compliance Training Management
+		trainingRoutes := v1.Group("/training")
+		{
+			// Modules
+			trainingRoutes.GET("/modules", trainingHandlers.ListModules)
+			trainingRoutes.GET("/modules/:id", trainingHandlers.GetModule)
+			trainingRoutes.POST("/modules", trainingHandlers.CreateModule)
+			trainingRoutes.PUT("/modules/:id", trainingHandlers.UpdateModule)
+
+			// Training Matrix (CTM)
+			trainingRoutes.GET("/matrix", trainingHandlers.GetMatrix)
+			trainingRoutes.GET("/matrix/:role", trainingHandlers.GetMatrixForRole)
+			trainingRoutes.POST("/matrix", trainingHandlers.SetMatrixEntry)
+			trainingRoutes.DELETE("/matrix/:role/:moduleId", trainingHandlers.DeleteMatrixEntry)
+
+			// Assignments
+			trainingRoutes.POST("/assignments/compute", trainingHandlers.ComputeAssignments)
+			trainingRoutes.GET("/assignments", trainingHandlers.ListAssignments)
+			trainingRoutes.GET("/assignments/:id", trainingHandlers.GetAssignment)
+			trainingRoutes.POST("/assignments/:id/start", trainingHandlers.StartAssignment)
+			trainingRoutes.POST("/assignments/:id/progress", trainingHandlers.UpdateAssignmentProgress)
+			trainingRoutes.POST("/assignments/:id/complete", trainingHandlers.CompleteAssignment)
+
+			// Quiz
+			trainingRoutes.GET("/quiz/:moduleId", trainingHandlers.GetQuiz)
+			trainingRoutes.POST("/quiz/:moduleId/submit", trainingHandlers.SubmitQuiz)
+			trainingRoutes.GET("/quiz/attempts/:assignmentId", trainingHandlers.GetQuizAttempts)
+
+			// Content Generation
+			trainingRoutes.POST("/content/generate", trainingHandlers.GenerateContent)
+			trainingRoutes.POST("/content/generate-quiz", trainingHandlers.GenerateQuiz)
+			trainingRoutes.POST("/content/generate-all", trainingHandlers.GenerateAllContent)
+			trainingRoutes.POST("/content/generate-all-quiz", trainingHandlers.GenerateAllQuizzes)
+			trainingRoutes.GET("/content/:moduleId", trainingHandlers.GetContent)
+			trainingRoutes.POST("/content/:id/publish", trainingHandlers.PublishContent)
+
+			// Audio/Media
+			trainingRoutes.POST("/content/:moduleId/generate-audio", trainingHandlers.GenerateAudio)
+			trainingRoutes.GET("/media/:moduleId", trainingHandlers.GetModuleMedia)
+			trainingRoutes.GET("/media/:id/url", trainingHandlers.GetMediaURL)
+			trainingRoutes.POST("/media/:id/publish", trainingHandlers.PublishMedia)
+
+			// Video
+			trainingRoutes.POST("/content/:moduleId/generate-video", trainingHandlers.GenerateVideo)
+			trainingRoutes.POST("/content/:moduleId/preview-script", trainingHandlers.PreviewVideoScript)
+
+			// Deadlines and Escalation
+			trainingRoutes.GET("/deadlines", trainingHandlers.GetDeadlines)
+			trainingRoutes.GET("/deadlines/overdue", trainingHandlers.GetOverdueDeadlines)
+			trainingRoutes.POST("/escalation/check", trainingHandlers.CheckEscalation)
+
+			// Audit and Stats
+			trainingRoutes.GET("/audit-log", trainingHandlers.GetAuditLog)
+			trainingRoutes.GET("/stats", trainingHandlers.GetStats)
+			trainingRoutes.GET("/certificates/:id/verify", trainingHandlers.VerifyCertificate)
+		}
 	}
 
 	// Create HTTP server