Iteration 3: Risikoanalyse + Menü-Trennung + Prozesskategorie

- Risiko-Modul (SPEC §4.2): Risk/RiskAsset-Schema mit RLS, laufende
  Nummer je Mandant (R-001), Brutto-/Rest-Bewertung (5×5), Behandlung,
  Status, Owner- und Prozess-Bezug, n:m betroffene Assets
- /risks im Mockup-Layout: 5×5-Heatmap (Farb-Bänder + R-Chips, Legende,
  Achsen) und Risikoregister mit Score-Pillen, Behandlungs-Tags, Status
- Risiko-Popups nach App-Muster: Read-only-Detail (Bewertungs-Band
  Brutto vs. Rest, betroffene Assets, Maßnahmen-Platzhalter für
  Iteration 4), Bearbeiten im Popup (Bewertung, Assets verknüpfen,
  Löschen), Anlegen; Server-Actions mit Zod, RBAC und Audit-Log
- Menü aufgetrennt: eigene Punkte "Asset-Inventar", "Business Impact
  Analyse" und "Risikoanalyse" (Modul-Tabs entfernt)
- Prozesskategorie (Kernprozess/Managementprozess/Unterstützender
  Prozess): Schema-Feld, Formulare, Listen-Spalte, Popup-Tag
- Asset-Detail-Popup optisch ans Prozess-Popup angeglichen (Stammdaten-
  Karte mit violettem Rand, Abhängigkeiten-Tabelle, Risiken-Band)
- "Zugeordnete Risiken" jetzt echt: im Asset-Popup (verknüpfte Risiken)
  und im Prozess-Popup (direkt + über Assets aggregiert); Dashboard-KPI
  "Offene Risiken" mit echten Zahlen; Seed mit 4 Beispiel-Risiken

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

prisma/migrations/20260702132947_risks_and_process_category/migration.sql

@@ -0,0 +1,74 @@
+-- CreateEnum
+CREATE TYPE "ProcessCategory" AS ENUM ('CORE', 'MANAGEMENT', 'SUPPORT');
+
+-- CreateEnum
+CREATE TYPE "RiskTreatment" AS ENUM ('AVOID', 'MITIGATE', 'TRANSFER', 'ACCEPT');
+
+-- CreateEnum
+CREATE TYPE "RiskStatus" AS ENUM ('OPEN', 'IN_TREATMENT', 'ACCEPTED', 'CLOSED');
+
+-- AlterTable
+ALTER TABLE "processes" ADD COLUMN     "category" "ProcessCategory" NOT NULL DEFAULT 'CORE';
+
+-- CreateTable
+CREATE TABLE "risks" (
+    "id" TEXT NOT NULL,
+    "tenant_id" TEXT NOT NULL,
+    "ref_no" INTEGER NOT NULL,
+    "title" TEXT NOT NULL,
+    "description" TEXT,
+    "threat" TEXT,
+    "vulnerability" TEXT,
+    "likelihood" INTEGER NOT NULL DEFAULT 1,
+    "impact" INTEGER NOT NULL DEFAULT 1,
+    "score" INTEGER NOT NULL DEFAULT 1,
+    "residual_likelihood" INTEGER,
+    "residual_impact" INTEGER,
+    "residual_score" INTEGER,
+    "treatment" "RiskTreatment" NOT NULL DEFAULT 'MITIGATE',
+    "status" "RiskStatus" NOT NULL DEFAULT 'OPEN',
+    "owner_id" TEXT,
+    "process_id" TEXT,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+    "created_by" TEXT,
+
+    CONSTRAINT "risks_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "risk_assets" (
+    "id" TEXT NOT NULL,
+    "tenant_id" TEXT NOT NULL,
+    "risk_id" TEXT NOT NULL,
+    "asset_id" TEXT NOT NULL,
+
+    CONSTRAINT "risk_assets_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "risks_tenant_id_idx" ON "risks"("tenant_id");
+
+-- CreateIndex
+CREATE INDEX "risks_tenant_id_status_idx" ON "risks"("tenant_id", "status");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "risks_tenant_id_ref_no_key" ON "risks"("tenant_id", "ref_no");
+
+-- CreateIndex
+CREATE INDEX "risk_assets_tenant_id_idx" ON "risk_assets"("tenant_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "risk_assets_risk_id_asset_id_key" ON "risk_assets"("risk_id", "asset_id");
+
+-- AddForeignKey
+ALTER TABLE "risks" ADD CONSTRAINT "risks_owner_id_fkey" FOREIGN KEY ("owner_id") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "risks" ADD CONSTRAINT "risks_process_id_fkey" FOREIGN KEY ("process_id") REFERENCES "processes"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "risk_assets" ADD CONSTRAINT "risk_assets_risk_id_fkey" FOREIGN KEY ("risk_id") REFERENCES "risks"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "risk_assets" ADD CONSTRAINT "risk_assets_asset_id_fkey" FOREIGN KEY ("asset_id") REFERENCES "assets"("id") ON DELETE CASCADE ON UPDATE CASCADE;

prisma/migrations/20260702133003_rls_risks/migration.sql

@@ -0,0 +1,9 @@
+-- RLS-Policies für die Risiko-Tabellen (analog zu den vorherigen RLS-Migrationen)
+
+ALTER TABLE "risks" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "risk_assets" ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY tenant_isolation ON "risks"
+  USING ("tenant_id" = current_setting('app.tenant_id', true));
+CREATE POLICY tenant_isolation ON "risk_assets"
+  USING ("tenant_id" = current_setting('app.tenant_id', true));