feat: Payment Terminal Compliance Modul — Phase 1+2
1. Control-Bibliothek: 130 Controls in 10 Domaenen (payment_controls_v1.json)
- PAY (20): Transaction Flow, Idempotenz, State Machine
- LOG (15): Audit Trail, PAN-Maskierung, Event-Typen
- CRYPTO (15): Secrets, HSM, P2PE, TLS
- API (15): Auth, RBAC, Rate Limiting, Injection
- TERM (15): ZVT/OPI, Heartbeat, Offline-Queue
- FW (10): Firmware Signing, Secure Boot, Tamper Detection
- REP (10): Reconciliation, Tagesabschluss, GoBD
- ACC (10): MFA, Session, Least Privilege
- ERR (10): Recovery, Circuit Breaker, Offline-Modus
- BLD (10): CI/CD, SBOM, Container Scanning
2. Backend: DB Migration 024, Go Handler (5 Endpoints), Routes
3. Frontend: /sdk/payment-compliance mit Control-Browser + Assessment-Wizard
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
38d3d24121