feat: Vorbereitung-Module auf 100% — Compliance-Scope Backend, DELETE-Endpoints, Proxy-Fixes, blocked-content Tab

Paket A — Kritische Blocker:
- compliance_scope_routes.py: GET + POST UPSERT für sdk_states JSONB-Feld
- compliance/api/__init__.py: compliance_scope_router registriert
- import/route.ts: POST-Proxy für multipart/form-data Upload
- screening/route.ts: POST-Proxy für Dependency-File Upload

Paket B — Backend + UI:
- company_profile_routes.py: DELETE-Endpoint (DSGVO Art. 17)
- company-profile/route.ts: DELETE-Proxy
- company-profile/page.tsx: Profil-löschen-Button mit Bestätigungs-Dialog
- source-policy/pii-rules/[id]/route.ts: GET ergänzt
- source-policy/operations/[id]/route.ts: GET + DELETE ergänzt

Paket C — Tests + UI:
- test_compliance_scope_routes.py: 27 Tests (neu)
- test_import_routes.py: +36 Tests → 60 gesamt
- test_screening_routes.py: +28 Tests → 80+ gesamt
- source-policy/page.tsx: "Blockierte Inhalte" Tab mit Tabelle + Remove

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend-compliance/compliance/api/company_profile_routes.py

@@ -311,6 +311,42 @@ async def upsert_company_profile(
         db.close()
 
 
+@router.delete("", status_code=200)
+async def delete_company_profile(
+    tenant_id: str = "default",
+    x_tenant_id: Optional[str] = Header(None, alias="X-Tenant-ID"),
+):
+    """Delete company profile for a tenant (DSGVO Recht auf Loeschung, Art. 17)."""
+    tid = x_tenant_id or tenant_id
+    db = SessionLocal()
+    try:
+        existing = db.execute(
+            "SELECT id FROM compliance_company_profiles WHERE tenant_id = :tid",
+            {"tid": tid},
+        ).fetchone()
+
+        if not existing:
+            raise HTTPException(status_code=404, detail="Company profile not found")
+
+        db.execute(
+            "DELETE FROM compliance_company_profiles WHERE tenant_id = :tid",
+            {"tid": tid},
+        )
+
+        log_audit(db, tid, "delete", None, None)
+        db.commit()
+
+        return {"success": True, "message": "Company profile deleted"}
+    except HTTPException:
+        raise
+    except Exception as e:
+        db.rollback()
+        logger.error(f"Failed to delete company profile: {e}")
+        raise HTTPException(status_code=500, detail="Failed to delete company profile")
+    finally:
+        db.close()
+
+
 @router.get("/audit", response_model=AuditListResponse)
 async def get_audit_log(
     tenant_id: str = "default",