feat: Consent-Service Module nach Compliance migriert (DSR, E-Mail-Templates, Legal Docs, Banner)

5-Phasen-Migration: Go consent-service Proxies durch native Python/FastAPI ersetzt.

Phase 1 — DSR (Betroffenenrechte): 6 Tabellen, 30 Endpoints, Frontend-API umgestellt
Phase 2 — E-Mail-Templates: 5 Tabellen, 20 Endpoints, neues Frontend, SDK_STEPS erweitert
Phase 3 — Legal Documents Extension: User Consents, Audit Log, Cookie-Kategorien
Phase 4 — Banner Consent: Device-Consents, Site-Configs, Kategorien, Vendors
Phase 5 — Cleanup: DSR-Proxy aus main.py entfernt, Frontend-URLs aktualisiert

148 neue Tests (50 + 47 + 26 + 25), alle bestanden.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-compliance/compliance/db/banner_models.py

@@ -0,0 +1,138 @@
+"""
+SQLAlchemy models for Banner Consent — Device-basierte Cookie-Consents.
+
+Tables:
+- compliance_banner_consents: Anonyme Geraete-Consents
+- compliance_banner_consent_audit_log: Immutable Audit
+- compliance_banner_site_configs: Site-Konfiguration
+- compliance_banner_category_configs: Consent-Kategorien pro Site
+- compliance_banner_vendor_configs: Third-Party-Vendor-Tracking
+"""
+
+import uuid
+from datetime import datetime
+
+from sqlalchemy import (
+    Column, String, Text, Boolean, Integer, DateTime, Index, JSON
+)
+from sqlalchemy.dialects.postgresql import UUID
+
+from classroom_engine.database import Base
+
+
+class BannerConsentDB(Base):
+    """Anonymer Device-basierter Cookie-Consent."""
+
+    __tablename__ = 'compliance_banner_consents'
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    tenant_id = Column(UUID(as_uuid=True), nullable=False)
+    site_id = Column(Text, nullable=False)
+    device_fingerprint = Column(Text, nullable=False)
+    categories = Column(JSON, default=list)
+    vendors = Column(JSON, default=list)
+    ip_hash = Column(Text)
+    user_agent = Column(Text)
+    consent_string = Column(Text)
+    expires_at = Column(DateTime)
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+    updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
+
+    __table_args__ = (
+        Index('idx_banner_consent_tenant', 'tenant_id'),
+        Index('idx_banner_consent_site', 'site_id'),
+        Index('idx_banner_consent_device', 'device_fingerprint'),
+    )
+
+
+class BannerConsentAuditLogDB(Base):
+    """Immutable Audit-Trail fuer Banner-Consents."""
+
+    __tablename__ = 'compliance_banner_consent_audit_log'
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    tenant_id = Column(UUID(as_uuid=True), nullable=False)
+    consent_id = Column(UUID(as_uuid=True))
+    action = Column(Text, nullable=False)
+    site_id = Column(Text, nullable=False)
+    device_fingerprint = Column(Text)
+    categories = Column(JSON, default=list)
+    ip_hash = Column(Text)
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+
+    __table_args__ = (
+        Index('idx_banner_audit_tenant', 'tenant_id'),
+        Index('idx_banner_audit_site', 'site_id'),
+        Index('idx_banner_audit_created', 'created_at'),
+    )
+
+
+class BannerSiteConfigDB(Base):
+    """Site-Konfiguration fuer Consent-Banner."""
+
+    __tablename__ = 'compliance_banner_site_configs'
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    tenant_id = Column(UUID(as_uuid=True), nullable=False)
+    site_id = Column(Text, nullable=False)
+    site_name = Column(Text)
+    site_url = Column(Text)
+    banner_title = Column(Text, default='Cookie-Einstellungen')
+    banner_description = Column(Text, default='Wir verwenden Cookies, um Ihnen die bestmoegliche Erfahrung zu bieten.')
+    privacy_url = Column(Text)
+    imprint_url = Column(Text)
+    dsb_name = Column(Text)
+    dsb_email = Column(Text)
+    theme = Column(JSON, default=dict)
+    tcf_enabled = Column(Boolean, default=False)
+    is_active = Column(Boolean, nullable=False, default=True)
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+    updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
+
+    __table_args__ = (
+        Index('idx_banner_site_config', 'tenant_id', 'site_id', unique=True),
+    )
+
+
+class BannerCategoryConfigDB(Base):
+    """Consent-Kategorien pro Site."""
+
+    __tablename__ = 'compliance_banner_category_configs'
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    site_config_id = Column(UUID(as_uuid=True), nullable=False)
+    category_key = Column(Text, nullable=False)
+    name_de = Column(Text, nullable=False)
+    name_en = Column(Text)
+    description_de = Column(Text)
+    description_en = Column(Text)
+    is_required = Column(Boolean, nullable=False, default=False)
+    sort_order = Column(Integer, nullable=False, default=0)
+    is_active = Column(Boolean, nullable=False, default=True)
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+
+    __table_args__ = (
+        Index('idx_banner_cat_config', 'site_config_id'),
+    )
+
+
+class BannerVendorConfigDB(Base):
+    """Third-Party-Vendor-Tracking pro Site."""
+
+    __tablename__ = 'compliance_banner_vendor_configs'
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    site_config_id = Column(UUID(as_uuid=True), nullable=False)
+    vendor_name = Column(Text, nullable=False)
+    vendor_url = Column(Text)
+    category_key = Column(Text, nullable=False)
+    description_de = Column(Text)
+    description_en = Column(Text)
+    cookie_names = Column(JSON, default=list)
+    retention_days = Column(Integer, default=365)
+    is_active = Column(Boolean, nullable=False, default=True)
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+
+    __table_args__ = (
+        Index('idx_banner_vendor_config', 'site_config_id'),
+    )