feat(pitch-deck): pivot to Maschinen- und Anlagenbau target market

Refocus entire pitch deck narrative on machine/plant manufacturers with
in-house embedded software development. Key changes:

- i18n: All DE/EN texts updated (cover, problem, solution, market, etc.)
- MarketSlide: Dynamic unit formatting (Mrd/Mio/k) for SOM in millions
- SolutionSlide: Code-Security pillar with ScanLine icon
- HowItWorksSlide: GitBranch icon for code repo connection step
- CompetitionSlide: Security features reframed for firmware/embedded
- RegulatorySlide: Added CRA (Cyber Resilience Act) as 4th tab
- AI chat prompt: Updated Kernbotschaften for Maschinenbau USP
- DB migration: TAM 8.7B, SAM 850M, SOM 7.2M, customers 5-380 (2026-2030),
  4 new differentiator features, product capabilities for code-security

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

pitch-deck/components/slides/RegulatorySlide.tsx

@@ -6,13 +6,13 @@ import { t } from '@/lib/i18n'
 import GradientText from '../ui/GradientText'
 import FadeInView from '../ui/FadeInView'
 import GlassCard from '../ui/GlassCard'
-import { Shield, Scale, Wifi, Calendar, AlertTriangle, CheckCircle2, Clock } from 'lucide-react'
+import { Shield, Scale, Wifi, Lock, Calendar, AlertTriangle, CheckCircle2, Clock } from 'lucide-react'
 
 interface RegulatorySlideProps {
   lang: Language
 }
 
-type RegTab = 'dsgvo' | 'aiact' | 'nis2'
+type RegTab = 'dsgvo' | 'aiact' | 'cra' | 'nis2'
 
 export default function RegulatorySlide({ lang }: RegulatorySlideProps) {
   const i = t(lang)
@@ -22,6 +22,7 @@ export default function RegulatorySlide({ lang }: RegulatorySlideProps) {
   const tabs: { id: RegTab; label: string; icon: typeof Shield }[] = [
     { id: 'dsgvo', label: de ? 'DSGVO / GDPR' : 'GDPR', icon: Shield },
     { id: 'aiact', label: 'AI Act', icon: Scale },
+    { id: 'cra', label: 'CRA', icon: Lock },
     { id: 'nis2', label: 'NIS2', icon: Wifi },
   ]
 
@@ -122,6 +123,49 @@ export default function RegulatorySlide({ lang }: RegulatorySlideProps) {
             'Regulatory change monitoring',
           ],
     },
+    cra: {
+      fullName: de ? 'Cyber Resilience Act (EU 2024/2847)' : 'Cyber Resilience Act (EU 2024/2847)',
+      status: de ? 'In Kraft seit Dez 2024' : 'In effect since Dec 2024',
+      statusColor: 'text-amber-400',
+      statusIcon: Clock,
+      deadline: de ? 'Sep 2026: Meldepflichten · Dez 2027: Vollstaendig anzuwenden' : 'Sep 2026: Reporting · Dec 2027: Fully applicable',
+      affectedCompanies: de ? 'Alle Hersteller von Produkten mit digitalen Elementen (Hardware & Software)' : 'All manufacturers of products with digital elements (hardware & software)',
+      keyRequirements: de
+        ? [
+            'Security by Design fuer alle Produkte mit Software',
+            'Schwachstellen-Management ueber gesamten Produktlebenszyklus',
+            'Software Bill of Materials (SBOM) fuer jedes Produkt',
+            'Kostenlose Sicherheitsupdates fuer Kunden',
+            'Meldepflicht bei aktiv ausgenutzten Schwachstellen (24h)',
+            'Konformitaetsbewertung durch Drittstelle (fuer kritische Produkte)',
+            'CE-Kennzeichnung fuer Cybersecurity-Compliance',
+          ]
+        : [
+            'Security by design for all products with software',
+            'Vulnerability management across entire product lifecycle',
+            'Software Bill of Materials (SBOM) for every product',
+            'Free security updates for customers',
+            'Reporting of actively exploited vulnerabilities (24h)',
+            'Third-party conformity assessment (for critical products)',
+            'CE marking for cybersecurity compliance',
+          ],
+      fines: de ? 'Bis zu 15 Mio. EUR oder 2,5% des weltweiten Jahresumsatzes' : 'Up to EUR 15M or 2.5% of global annual revenue',
+      howWeHelp: de
+        ? [
+            'Automatische SBOM-Generierung aus Code-Repositories',
+            'Kontinuierliches Schwachstellen-Scanning (Trivy, Grype)',
+            'Security-Fixes durch 1000B Cloud-LLM implementiert',
+            'CRA-konforme Dokumentation und Audit-Trail',
+            'Risikoanalysen fuer Embedded-Software und Firmware',
+          ]
+        : [
+            'Automatic SBOM generation from code repositories',
+            'Continuous vulnerability scanning (Trivy, Grype)',
+            'Security fixes implemented by 1000B cloud LLM',
+            'CRA-compliant documentation and audit trail',
+            'Risk assessments for embedded software and firmware',
+          ],
+    },
     nis2: {
       fullName: de ? 'NIS-2-Richtlinie (EU 2022/2555)' : 'NIS2 Directive (EU 2022/2555)',
       status: de ? 'Umsetzung in nationales Recht laeuft' : 'National transposition in progress',