fix(cra): IACE-Create id-Wrapper + MaschinenVO eigene Sektion

1) createProject las proj.id, der Create-Response ist aber {project:{id}} →
   'Projekt anlegen' war kaputt. Jetzt proj.project?.id. E2E verifiziert
   (create→put limits_form→get→delete = 200).
2) MaschinenVO-Sicherheitspflichten wurden in die CRA-Cyber-Buckets
   (Code/Prozess/Doku) gemischt → fehl-kategorisiert (Maschinen-Safety ≠
   CRA-Annex-I-Cyber). Jetzt eigene Response-Liste machinery_guideline +
   eigener Frontend-Abschnitt 'Maschinensicherheit (MaschinenVO 2023/1230)';
   geklebtes 'MaschVO'-Badge entfaellt damit.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

backend-compliance/compliance/api/cra_assess_routes.py

@@ -274,6 +274,7 @@ async def readiness(body: ReadinessRequest):
     classification, rationale = _classify(intake)
     in_scope = classification != "NOT_IN_SCOPE"
     groups = {"code": [], "process": [], "document": []}
+    machinery_guideline = []
     regulations = []
     if in_scope:
         regulations.append("CRA")
@@ -286,14 +287,14 @@ async def readiness(body: ReadinessRequest):
                 "measures": [{"id": m, "name": MEASURES.get(m, m)} for m in req.get("mapped_measures", [])],
                 "source": "CRA",
             })
-        # Machine/plant builders are ALSO hit by the new Machinery Regulation's
-        # cyber-with-safety essential requirements (Annex III) — show the combination.
+        # Machinery-Regulation safety obligations are NOT CRA Annex-I cyber controls
+        # — keep them in their OWN section, not mixed into the Code/Process/Document
+        # cyber buckets (machine safety != cybersecurity).
         if body.is_machinery or machine_integrator:
             machinery = _machinery_obligations()
             if machinery:
                 regulations.append("Maschinen-VO 2023/1230")
-                for bucket, item in machinery:
-                    groups[bucket].append(item)
+                machinery_guideline = [item for _bucket, item in machinery]
     total_effort = sum(r["effort_days"] for g in groups.values() for r in g if r.get("effort_days"))
     verdict = compute_verdict(
         classification, body.placed_on_market_after_2027,
@@ -306,6 +307,7 @@ async def readiness(body: ReadinessRequest):
         "conformity_path_hint": _PATH_HINT.get(classification, ""),
         "regulations": regulations,
         "guideline": groups,
+        "machinery_guideline": machinery_guideline,
         "counts": {k: len(v) for k, v in groups.items()},
         "total_effort_days": total_effort,
         "deadlines": list(DEADLINES),