feat: Betrieb-Module → 100% — Echte CRUD-Flows, kein Mock-Data

Alle 7 Betrieb-Module von 30–75% auf 100% gebracht:

**Gruppe 1 — UI-Ergänzungen (Backend bereits vorhanden):**
- incidents/page.tsx: IncidentCreateModal + IncidentDetailDrawer (Status-Transitions)
- whistleblower/page.tsx: WhistleblowerCreateModal + CaseDetailPanel (Kommentare, Zuweisung)
- dsr/page.tsx: DSRCreateModal + DSRDetailPanel (Workflow-Timeline, Status-Buttons)
- vendor-compliance/page.tsx: VendorCreateModal + "Neuer Vendor" Button

**Gruppe 2 — Escalations Full Stack:**
- Migration 011: compliance_escalations Tabelle
- Backend: escalation_routes.py (7 Endpoints: list/create/get/update/status/stats/delete)
- Proxy: /api/sdk/v1/escalations/[[...path]] → backend:8002
- Frontend: Mock-Array komplett ersetzt durch echte API + EscalationCreateModal + EscalationDetailDrawer

**Gruppe 2 — Consent Templates:**
- Migration 010: compliance_consent_email_templates + compliance_consent_gdpr_processes (7+7 Seed-Einträge)
- Backend: consent_template_routes.py (GET/POST/PUT/DELETE Templates + GET/PUT GDPR-Prozesse)
- Proxy: /api/sdk/v1/consent-templates/[[...path]]
- Frontend: consent-management/page.tsx lädt Templates + Prozesse aus DB (ApiTemplateEditor, ApiGdprProcessEditor)

**Gruppe 3 — Notfallplan:**
- Migration 012: 4 Tabellen (contacts, scenarios, checklists, exercises)
- Backend: notfallplan_routes.py (vollständiges CRUD + /stats)
- Proxy: /api/sdk/v1/notfallplan/[[...path]]
- Frontend: notfallplan/page.tsx — DB-backed Kontakte + Szenarien + Übungen, ContactCreateModal + ScenarioCreateModal

**Infrastruktur:**
- __init__.py: escalation_router + consent_template_router + notfallplan_router registriert
- Deploy-Skripte: apply_escalations_migration.sh, apply_consent_templates_migration.sh, apply_notfallplan_migration.sh
- Tests: 40 neue Tests (test_escalation_routes.py, test_consent_template_routes.py, test_notfallplan_routes.py)
- flow-data.ts: Completion aller 7 Module auf 100% gesetzt

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

admin-compliance/app/(sdk)/sdk/vendor-compliance/page.tsx

@@ -1,8 +1,220 @@
 'use client'
 
+import { useState } from 'react'
 import { useVendorCompliance } from '@/lib/sdk/vendor-compliance'
 import Link from 'next/link'
 
+// =============================================================================
+// VENDOR CREATE MODAL
+// =============================================================================
+
+function VendorCreateModal({
+  onClose,
+  onSuccess
+}: {
+  onClose: () => void
+  onSuccess: () => void
+}) {
+  const [name, setName] = useState('')
+  const [serviceDescription, setServiceDescription] = useState('')
+  const [category, setCategory] = useState('data_processor')
+  const [country, setCountry] = useState('Germany')
+  const [riskLevel, setRiskLevel] = useState('MEDIUM')
+  const [dpaStatus, setDpaStatus] = useState('PENDING')
+  const [contractUrl, setContractUrl] = useState('')
+  const [isSaving, setIsSaving] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  const handleSave = async () => {
+    if (!name.trim()) {
+      setError('Name ist erforderlich.')
+      return
+    }
+    setIsSaving(true)
+    setError(null)
+    try {
+      const res = await fetch('/api/sdk/v1/vendor-compliance/vendors', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          name,
+          serviceDescription,
+          category,
+          country,
+          riskLevel,
+          dpaStatus,
+          contractUrl
+        })
+      })
+      if (!res.ok) {
+        const data = await res.json().catch(() => ({}))
+        throw new Error(data.detail || data.message || `Fehler: ${res.status}`)
+      }
+      onSuccess()
+    } catch (err: unknown) {
+      setError(err instanceof Error ? err.message : 'Unbekannter Fehler')
+    } finally {
+      setIsSaving(false)
+    }
+  }
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center">
+      {/* Backdrop */}
+      <div
+        className="absolute inset-0 bg-black/50"
+        onClick={onClose}
+      />
+      {/* Modal */}
+      <div className="relative bg-white rounded-xl shadow-2xl w-full max-w-lg mx-4 p-6 z-10 max-h-[90vh] overflow-y-auto">
+        <div className="flex items-center justify-between mb-6">
+          <h2 className="text-xl font-semibold text-gray-900">Neuen Vendor anlegen</h2>
+          <button
+            onClick={onClose}
+            className="p-1 text-gray-400 hover:text-gray-600 rounded transition-colors"
+          >
+            <svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M6 18L18 6M6 6l12 12" />
+            </svg>
+          </button>
+        </div>
+
+        {error && (
+          <div className="mb-4 p-3 bg-red-50 border border-red-200 rounded-lg text-sm text-red-700">
+            {error}
+          </div>
+        )}
+
+        <div className="space-y-4">
+          {/* Name */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">
+              Name <span className="text-red-500">*</span>
+            </label>
+            <input
+              type="text"
+              value={name}
+              onChange={e => setName(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+              placeholder="Name des Vendors / Dienstleisters"
+            />
+          </div>
+
+          {/* Service Description */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">Leistungsbeschreibung</label>
+            <input
+              type="text"
+              value={serviceDescription}
+              onChange={e => setServiceDescription(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+              placeholder="Kurze Beschreibung der erbrachten Leistung"
+            />
+          </div>
+
+          {/* Category */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">Kategorie</label>
+            <select
+              value={category}
+              onChange={e => setCategory(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+            >
+              <option value="data_processor">Auftragsverarbeiter</option>
+              <option value="cloud_provider">Cloud-Anbieter</option>
+              <option value="saas">SaaS-Anbieter</option>
+              <option value="analytics">Analytics</option>
+              <option value="payment">Zahlungsabwicklung</option>
+              <option value="other">Sonstiges</option>
+            </select>
+          </div>
+
+          {/* Country */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">Land</label>
+            <input
+              type="text"
+              value={country}
+              onChange={e => setCountry(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+              placeholder="z.B. Germany, USA, Netherlands"
+            />
+          </div>
+
+          {/* Risk Level */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">Risikostufe</label>
+            <select
+              value={riskLevel}
+              onChange={e => setRiskLevel(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+            >
+              <option value="LOW">Niedrig</option>
+              <option value="MEDIUM">Mittel</option>
+              <option value="HIGH">Hoch</option>
+              <option value="CRITICAL">Kritisch</option>
+            </select>
+          </div>
+
+          {/* DPA Status */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">AVV-Status</label>
+            <select
+              value={dpaStatus}
+              onChange={e => setDpaStatus(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+            >
+              <option value="SIGNED">Unterzeichnet</option>
+              <option value="PENDING">Ausstehend</option>
+              <option value="EXPIRED">Abgelaufen</option>
+              <option value="NOT_REQUIRED">Nicht erforderlich</option>
+            </select>
+          </div>
+
+          {/* Contract URL */}
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">AVV-Link (URL)</label>
+            <input
+              type="text"
+              value={contractUrl}
+              onChange={e => setContractUrl(e.target.value)}
+              className="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 text-sm"
+              placeholder="https://..."
+            />
+          </div>
+        </div>
+
+        {/* Buttons */}
+        <div className="flex items-center justify-end gap-3 mt-6 pt-4 border-t border-gray-200">
+          <button
+            onClick={onClose}
+            className="px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 rounded-lg transition-colors"
+          >
+            Abbrechen
+          </button>
+          <button
+            onClick={handleSave}
+            disabled={isSaving}
+            className="px-4 py-2 text-sm bg-blue-600 text-white rounded-lg hover:bg-blue-700 transition-colors disabled:opacity-50 disabled:cursor-not-allowed flex items-center gap-2"
+          >
+            {isSaving && (
+              <svg className="animate-spin w-4 h-4" fill="none" viewBox="0 0 24 24">
+                <circle className="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" strokeWidth="4" />
+                <path className="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z" />
+              </svg>
+            )}
+            Speichern
+          </button>
+        </div>
+      </div>
+    </div>
+  )
+}
+
+// =============================================================================
+// MAIN PAGE
+// =============================================================================
+
 export default function VendorComplianceDashboard() {
   const {
     vendors,
@@ -15,6 +227,8 @@ export default function VendorComplianceDashboard() {
     isLoading,
   } = useVendorCompliance()
 
+  const [showVendorCreate, setShowVendorCreate] = useState(false)
+
   if (isLoading) {
     return (
       <div className="flex items-center justify-center h-64">
@@ -26,13 +240,24 @@ export default function VendorComplianceDashboard() {
   return (
     <div className="space-y-6">
       {/* Header */}
-      <div>
-        <h1 className="text-2xl font-bold text-gray-900 dark:text-white">
-          Vendor & Contract Compliance
-        </h1>
-        <p className="mt-1 text-sm text-gray-500 dark:text-gray-400">
-          Übersicht über Verarbeitungsverzeichnis, Vendor Register und Vertragsprüfung
-        </p>
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-2xl font-bold text-gray-900 dark:text-white">
+            Vendor & Contract Compliance
+          </h1>
+          <p className="mt-1 text-sm text-gray-500 dark:text-gray-400">
+            Übersicht über Verarbeitungsverzeichnis, Vendor Register und Vertragsprüfung
+          </p>
+        </div>
+        <button
+          onClick={() => setShowVendorCreate(true)}
+          className="flex items-center gap-2 px-4 py-2 bg-blue-600 text-white rounded-lg hover:bg-blue-700 transition-colors text-sm font-medium"
+        >
+          <svg className="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 6v6m0 0v6m0-6h6m-6 0H6" />
+          </svg>
+          Neuer Vendor
+        </button>
       </div>
 
       {/* Quick Stats */}
@@ -257,6 +482,14 @@ export default function VendorComplianceDashboard() {
           )}
         </div>
       </div>
+
+      {/* Vendor Create Modal */}
+      {showVendorCreate && (
+        <VendorCreateModal
+          onClose={() => setShowVendorCreate(false)}
+          onSuccess={() => { setShowVendorCreate(false); window.location.reload() }}
+        />
+      )}
     </div>
   )
 }