fix(cra): IACE-Create id-Wrapper + MaschinenVO eigene Sektion

1) createProject las proj.id, der Create-Response ist aber {project:{id}} →
   'Projekt anlegen' war kaputt. Jetzt proj.project?.id. E2E verifiziert
   (create→put limits_form→get→delete = 200).
2) MaschinenVO-Sicherheitspflichten wurden in die CRA-Cyber-Buckets
   (Code/Prozess/Doku) gemischt → fehl-kategorisiert (Maschinen-Safety ≠
   CRA-Annex-I-Cyber). Jetzt eigene Response-Liste machinery_guideline +
   eigener Frontend-Abschnitt 'Maschinensicherheit (MaschinenVO 2023/1230)';
   geklebtes 'MaschVO'-Badge entfaellt damit.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

admin-compliance/app/sdk/cra/_components/DatasheetExtract.tsx

@@ -70,7 +70,7 @@ export function DatasheetExtract() {
       })
       if (!cr.ok) return
       const proj = await cr.json()
-      const pid = proj.id || proj.project_id
+      const pid = proj.project?.id || proj.id || proj.project_id
       if (!pid) return
       await fetch(`/api/sdk/v1/iace/projects/${pid}`, {
         method: 'PUT', headers: { 'Content-Type': 'application/json' },

admin-compliance/app/sdk/cra/_components/ReadinessResult.tsx

@@ -15,6 +15,7 @@ export interface ReadinessResult {
   conformity_path_hint: string
   regulations: string[]
   guideline: { code: GuidelineItem[]; process: GuidelineItem[]; document: GuidelineItem[] }
+  machinery_guideline?: GuidelineItem[]
   counts: { code: number; process: number; document: number }
   total_effort_days: number
   deadlines: { date: string; label: string }[]
@@ -172,9 +173,6 @@ export function ReadinessResultView({ result, onCreateProject }: { result: Readi
                 <ul className="mt-2 space-y-1.5">
                   {result.guideline[b.key].map((it) => (
                     <li key={it.req_id} className="text-[11px] text-gray-600 dark:text-gray-300">
-                      {it.source === 'Maschinen-VO' && (
-                        <span className="inline-block rounded bg-indigo-100 text-indigo-700 dark:bg-indigo-900/40 dark:text-indigo-300 px-1 py-0.5 text-[9px] font-medium mr-1">MaschVO</span>
-                      )}
                       <span className="font-medium text-gray-800 dark:text-gray-200">{it.title}</span>
                       <span className="text-gray-400"> · {it.annex_anchor}</span>
                     </li>
@@ -183,6 +181,25 @@ export function ReadinessResultView({ result, onCreateProject }: { result: Readi
               </div>
             ))}
           </div>
+          {result.machinery_guideline && result.machinery_guideline.length > 0 && (
+            <div className="rounded-lg border border-indigo-200 dark:border-indigo-800 bg-indigo-50/40 dark:bg-indigo-900/10 p-3">
+              <h3 className="text-sm font-semibold text-indigo-900 dark:text-indigo-200">
+                Maschinensicherheit — Maschinenverordnung (EU) 2023/1230
+              </h3>
+              <p className="text-[11px] text-indigo-800/70 dark:text-indigo-300/70 mb-1">
+                Eigene Pflichten zur Personensicherheit — getrennt von den CRA-Cyber-Anforderungen.
+              </p>
+              <ul className="space-y-1">
+                {result.machinery_guideline.map((it) => (
+                  <li key={it.req_id} className="text-[11px] text-gray-700 dark:text-gray-200">
+                    <span className="font-medium">{it.title}</span>
+                    <span className="text-gray-400"> · {it.annex_anchor}</span>
+                  </li>
+                ))}
+              </ul>
+            </div>
+          )}
+
           <div className="flex flex-wrap gap-3 text-[11px] text-gray-500">
             <span className="font-medium text-gray-600 dark:text-gray-300">CRA-Fristen:</span>
             {result.deadlines.map((d) => (