fix(admin): resolve all 266 TypeScript errors, enable strict build

Eliminate the pre-existing TS errors that were masked by
next.config.js `typescript.ignoreBuildErrors: true`, then turn the flag
OFF so the compiler is a real safety net for future changes. `next build`
and `tsc --noEmit` now pass with 0 errors.

The errors were not cosmetic — several exposed real latent bugs hidden by
the flag, e.g. the drafting-engine ConstraintEnforcer read non-existent
fields (`t.rule.dsfaRequired`, `d.required`, `r.title`), so its DSFA hard
gate and risk-flag checks were silently no-ops; scopeDefaults read
snake_case CompanyProfile fields that never matched the camelCase type
(generator defaults never populated). Both fixed by aligning code to the
current types.

Highlights:
- Vitest globals: add vitest-globals.d.ts (config already had globals:true)
  so the test files type-check; exclude Playwright specs from vitest.
- Add a minimal ambient `pg` module declaration (no @types/pg installed).
- Fix Next 15 route handlers to await Promise params.
- Reconcile drifted types across loeschfristen, compliance-scope, document-
  generator, drafting-engine, vendor-compliance, agent and more.

Pre-existing (NOT caused here, proven by stashing the diff): 3 vitest
logic tests still fail — getNextStep (2) and buildDocumentScope priority (1).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

admin-compliance/app/sdk/document-generator/scopeDefaults.ts

@@ -12,8 +12,8 @@
  *   L4 = Zertifizierungsbereit (≥250 MA oder regulierte Branche)
  */
 
-import type { ComplianceDepthLevel } from '../../lib/sdk/compliance-scope-types/core-levels'
-import type { CompanyProfile } from '../../lib/sdk/types'
+import type { ComplianceDepthLevel } from '@/lib/sdk/compliance-scope-types/core-levels'
+import type { CompanyProfile } from '@/lib/sdk/types'
 import type { TOMCtx, DPACtx } from './contextBridge'
 
 // ============================================================================
@@ -216,33 +216,29 @@ export function getGeneratorDefaults(
 
   // CompanyProfile-Felder in TOM/DPA uebernehmen
   if (profile) {
-    if (profile.company_name) {
-      dpaBase.AN_NAME = profile.company_name
+    if (profile.companyName) {
+      dpaBase.AN_NAME = profile.companyName
       scopeSet.add('DPA.AN_NAME')
     }
-    if (profile.address) {
-      dpaBase.AN_STRASSE = profile.address
+    if (profile.headquartersStreet) {
+      dpaBase.AN_STRASSE = profile.headquartersStreet
       scopeSet.add('DPA.AN_STRASSE')
     }
-    if (profile.city && profile.postal_code) {
-      dpaBase.AN_PLZ_ORT = `${profile.postal_code} ${profile.city}`
+    if (profile.headquartersCity && profile.headquartersZip) {
+      dpaBase.AN_PLZ_ORT = `${profile.headquartersZip} ${profile.headquartersCity}`
       scopeSet.add('DPA.AN_PLZ_ORT')
     }
-    if (profile.dpo_name) {
+    if (profile.dpoName) {
       tomBase.ISB_NAME = tomBase.ISB_NAME || ''
-      dpaBase.AN_DSB_NAME = profile.dpo_name
+      dpaBase.AN_DSB_NAME = profile.dpoName
       scopeSet.add('DPA.AN_DSB_NAME')
     }
-    if (profile.dpo_email) {
-      dpaBase.AN_DSB_EMAIL = profile.dpo_email
+    if (profile.dpoEmail) {
+      dpaBase.AN_DSB_EMAIL = profile.dpoEmail
       scopeSet.add('DPA.AN_DSB_EMAIL')
     }
-    if (profile.ceo_name) {
-      dpaBase.AN_UNTERZEICHNER_NAME = profile.ceo_name
-      tomBase.GF_NAME = profile.ceo_name
-      scopeSet.add('DPA.AN_UNTERZEICHNER_NAME')
-      scopeSet.add('TOM.GF_NAME')
-    }
+    // Unterzeichner/GF werden NICHT aus dem CompanyProfile befuellt — es enthaelt
+    // keine Person; diese Felder kommen aus dem TOM/DPA-Generator selbst.
   }
 
   // Alle gesetzten TOM/DPA Felder als scope-set markieren