fix: Restore all files lost during destructive rebase

A previous `git pull --rebase origin main` dropped 177 local commits,
losing 3400+ files across admin-v2, backend, studio-v2, website,
klausur-service, and many other services. The partial restore attempt
(660295e2) only recovered some files.

This commit restores all missing files from pre-rebase ref 98933f5e
while preserving post-rebase additions (night-scheduler, night-mode UI,
NightModeWidget dashboard integration).

Restored features include:
- AI Module Sidebar (FAB), OCR Labeling, OCR Compare
- GPU Dashboard, RAG Pipeline, Magic Help
- Klausur-Korrektur (8 files), Abitur-Archiv (5+ files)
- Companion, Zeugnisse-Crawler, Screen Flow
- Full backend, studio-v2, website, klausur-service
- All compliance SDKs, agent-core, voice-service
- CI/CD configs, documentation, scripts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

pca-platform/ai-access.json

@@ -0,0 +1,82 @@
+{
+  "thresholds": {
+    "score_pass": 0.7,
+    "score_challenge": 0.4
+  },
+  "weights": {
+    "dwell_ratio": 0.30,
+    "scroll_score": 0.25,
+    "pointer_variance": 0.20,
+    "click_rate": 0.25
+  },
+  "step_up": {
+    "methods": ["webauthn", "pow"],
+    "primary": "webauthn",
+    "webauthn": {
+      "enabled": true,
+      "userVerification": "preferred",
+      "timeout_ms": 60000,
+      "challenge_endpoint": "/pca/v1/webauthn-challenge"
+    },
+    "pow": {
+      "enabled": true,
+      "difficulty": 4,
+      "max_duration_ms": 5000
+    }
+  },
+  "tick": {
+    "endpoint": "/pca/v1/tick",
+    "interval_ms": 5000
+  },
+  "paths": {
+    "/api/*": {
+      "min_score": 0.7,
+      "step_up_method": "webauthn"
+    },
+    "/admin/*": {
+      "min_score": 0.8,
+      "step_up_method": "webauthn"
+    },
+    "/public/*": {
+      "min_score": 0.0,
+      "step_up_method": null
+    },
+    "default": {
+      "min_score": 0.4,
+      "step_up_method": "pow"
+    }
+  },
+  "pca_roles": {
+    "Person": {
+      "description": "Verified human visitor",
+      "access": "allow",
+      "price": null
+    },
+    "Corporate": {
+      "description": "Verified business entity",
+      "access": "allow",
+      "price": null
+    },
+    "Agent": {
+      "description": "AI/Bot agent",
+      "access": "charge",
+      "price": {
+        "amount": "0.001",
+        "currency": "EUR",
+        "per": "request"
+      }
+    }
+  },
+  "payment": {
+    "enabled": true,
+    "methods": ["EURC", "USDC", "Lightning"],
+    "wallet_address": null,
+    "min_balance": "0.01"
+  },
+  "compliance": {
+    "gdpr": true,
+    "anonymize_ip": true,
+    "no_cookies": true,
+    "no_pii": true
+  }
+}