feat: Add DevSecOps tools, Woodpecker proxy, Vault persistent storage, pitch-deck annex slides

- Install Gitleaks, Trivy, Grype, Syft, Semgrep, Bandit in backend-core Dockerfile
- Add Woodpecker SQLite proxy API (fallback without API token)
- Mount woodpecker_data volume read-only to backend-core
- Add backend proxy fallback in admin-core Woodpecker route
- Add Vault file-based persistent storage (config.hcl, init-vault.sh)
- Auto-init, unseal and root-token persistence for Vault
- Add 6 pitch-deck annex slides (Assumptions, Architecture, GTM, Regulatory, Engineering, AI Pipeline)
- Dynamic margin/amortization KPIs in BusinessModelSlide
- Market sources modal with citations in MarketSlide
- Redesign nginx landing page to 3-column layout (Lehrer/Compliance/Core)
- Extend MkDocs nav with Services and SDK documentation sections
- Add SDK Protection architecture doc

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

mkdocs.yml

@@ -1,5 +1,5 @@
-site_name: BreakPilot Core - Dokumentation
-site_url: https://macmini:8009
+site_name: Breakpilot Dokumentation
+site_url: http://macmini:8009
 docs_dir: docs-src
 site_dir: docs-site
 
@@ -9,16 +9,14 @@ theme:
   palette:
     - scheme: default
       primary: teal
-      accent: teal
       toggle:
         icon: material/brightness-7
-        name: Dark Mode
+        name: Dark Mode aktivieren
     - scheme: slate
       primary: teal
-      accent: teal
       toggle:
         icon: material/brightness-4
-        name: Light Mode
+        name: Light Mode aktivieren
   features:
     - search.highlight
     - search.suggest
@@ -27,6 +25,7 @@ theme:
     - navigation.expand
     - navigation.top
     - content.code.copy
+    - content.tabs.link
     - toc.follow
 
 plugins:
@@ -53,18 +52,48 @@ markdown_extensions:
   - toc:
       permalink: true
 
+extra:
+  social:
+    - icon: fontawesome/brands/github
+      link: http://macmini:3003/breakpilot/breakpilot-pwa
+
 nav:
   - Start: index.md
   - Erste Schritte:
-    - Einrichtung: getting-started/environment-setup.md
+    - Umgebung einrichten: getting-started/environment-setup.md
     - Mac Mini Setup: getting-started/mac-mini-setup.md
   - Architektur:
-    - System-Architektur: architecture/system-architecture.md
+    - Systemuebersicht: architecture/system-architecture.md
     - Auth-System: architecture/auth-system.md
-    - Mail & RBAC: architecture/mail-rbac-architecture.md
+    - Mail-RBAC: architecture/mail-rbac-architecture.md
+    - Multi-Agent: architecture/multi-agent.md
     - Secrets Management: architecture/secrets-management.md
     - DevSecOps: architecture/devsecops.md
+    - SDK Protection: architecture/sdk-protection.md
     - Environments: architecture/environments.md
+    - Zeugnis-System: architecture/zeugnis-system.md
+  - Services:
+    - KI-Daten-Pipeline:
+      - Uebersicht: services/ki-daten-pipeline/index.md
+      - Architektur: services/ki-daten-pipeline/architecture.md
+    - Klausur-Service:
+      - Uebersicht: services/klausur-service/index.md
+      - BYOEH Systemerklaerung: services/klausur-service/byoeh-system-erklaerung.md
+      - BYOEH Architektur: services/klausur-service/BYOEH-Architecture.md
+      - BYOEH Developer Guide: services/klausur-service/BYOEH-Developer-Guide.md
+      - NiBiS Pipeline: services/klausur-service/NiBiS-Ingestion-Pipeline.md
+      - OCR Labeling: services/klausur-service/OCR-Labeling-Spec.md
+      - OCR Compare: services/klausur-service/OCR-Compare.md
+      - RAG Admin: services/klausur-service/RAG-Admin-Spec.md
+      - Worksheet Editor: services/klausur-service/Worksheet-Editor-Architecture.md
+    - Voice-Service: services/voice-service/index.md
+    - Agent-Core: services/agent-core/index.md
+    - AI-Compliance-SDK:
+      - Uebersicht: services/ai-compliance-sdk/index.md
+      - Architektur: services/ai-compliance-sdk/ARCHITECTURE.md
+      - Developer Guide: services/ai-compliance-sdk/DEVELOPER.md
+      - Auditor Dokumentation: services/ai-compliance-sdk/AUDITOR_DOCUMENTATION.md
+      - SBOM: services/ai-compliance-sdk/SBOM.md
   - API:
     - Backend API: api/backend-api.md
   - Entwicklung: