feat: Add Academy, Whistleblower, Incidents SDK modules, pitch-deck, blog and CI/CD config

- Academy, Whistleblower, Incidents frontend pages with API proxies and types
- Vendor compliance API proxy route
- Go backend handlers and models for all new SDK modules
- Investor pitch-deck app with interactive slides
- Blog section with DSGVO, AI Act, NIS2, glossary articles
- MkDocs documentation site
- CI/CD pipelines (Woodpecker, GitHub Actions), security scanning config
- Planning and implementation documentation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-v2/.trivy.yaml

@@ -0,0 +1,66 @@
+# Trivy Configuration for BreakPilot
+# https://trivy.dev/
+#
+# Run: trivy image breakpilot-pwa-backend:latest
+# Run filesystem: trivy fs .
+# Run config: trivy config .
+
+# Scan settings
+scan:
+  # Security checks to perform
+  security-checks:
+    - vuln        # Vulnerabilities
+    - config      # Misconfigurations
+    - secret      # Secrets in files
+
+# Vulnerability settings
+vulnerability:
+  # Vulnerability types to scan for
+  type:
+    - os          # OS packages
+    - library     # Application dependencies
+
+  # Ignore unfixed vulnerabilities
+  ignore-unfixed: false
+
+# Severity settings
+severity:
+  - CRITICAL
+  - HIGH
+  - MEDIUM
+  # - LOW  # Uncomment to include low severity
+
+# Output format
+format: table
+
+# Exit code on findings
+exit-code: 1
+
+# Timeout
+timeout: 10m
+
+# Cache directory
+cache-dir: /tmp/trivy-cache
+
+# Skip files/directories
+skip-dirs:
+  - node_modules
+  - venv
+  - .venv
+  - __pycache__
+  - .git
+  - .idea
+  - .vscode
+
+skip-files:
+  - "*.md"
+  - "*.txt"
+  - "*.log"
+
+# Ignore specific vulnerabilities (add after review)
+ignorefile: .trivyignore
+
+# SBOM generation
+sbom:
+  format: cyclonedx
+  output: sbom.json