Projekt-Fundament: Spec, Docker-Stack, Prisma-Basis, Tenant-Guard

- docs/SPEC.md (v1.2: Assets & BIA als ein Modul, Risiko-Detailansicht
  mit Maßnahmen/betroffenen Assets, Risiko-Verknüpfungen in allen
  Detailansichten) + UI-Mockup als Referenz
- Docker-Compose: app, worker, postgres (pgvector), redis, minio, mailhog
- Prisma 7: Fundament-Schema (Tenant, User, RBAC, AuditLog), prisma.config.ts,
  pg-Treiberadapter
- Tenant-Guard (src/server/db.ts): erzwungene Mandanten-Isolation für
  alle tenant-gebundenen Modelle
- AGENTS.md/README mit Projektregeln (Isolation, RBAC, Audit-Log, i18n, Lizenz)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.env.example

@@ -0,0 +1,29 @@
+# --- Datenbank ---
+POSTGRES_USER=isms
+POSTGRES_PASSWORD=isms
+POSTGRES_DB=isms
+DATABASE_URL=postgresql://isms:isms@localhost:5432/isms?schema=public
+
+# --- Redis (BullMQ) ---
+REDIS_URL=redis://localhost:6379
+
+# --- Objektspeicher (MinIO / S3-kompatibel) ---
+S3_ENDPOINT=http://localhost:9000
+S3_ACCESS_KEY=isms
+S3_SECRET_KEY=isms-secret
+S3_BUCKET=isms-documents
+
+# --- Auth ---
+AUTH_SECRET=change-me-generate-with-openssl-rand-base64-32
+AUTH_URL=http://localhost:3000
+
+# --- KI-Provider (anthropic | openai) ---
+AI_PROVIDER=anthropic
+AI_API_KEY=
+
+# --- E-Mail (Dev: Mailhog) ---
+SMTP_HOST=localhost
+SMTP_PORT=1025
+SMTP_USER=
+SMTP_PASSWORD=
+SMTP_FROM=isms@example.com