Fundament: ISMS-Module entfernt; Craftvia-Rollen, Module, Navigation, i18n-Split

- ISMS-Routen, Actions, Server-/Lib-Code, Komponenten, Prisma-Modelle, Seeds,
  Importer, Skripte und ISMS-Tests entfernt (Fundament bleibt: Auth, Identity,
  MFA/WebAuthn, RBAC, Audit, Mail, Storage, Backup/DSGVO, Plattform-Admin)
- Schema auf Fundament-Modelle reduziert; TenantSettings generisch (+phone/email)
- TENANT_MODELS (db.ts, backup/topology.ts) und PII-Felder ausgedünnt
- RBAC: Rollen tenant-admin/backoffice/team-lead/technician + Craftvia-Permissions
- Modul-Katalog (customers, sites, teams, work_orders, imports, field, reports,
  emergency, documents, notifications, lotse) + Navigation aus src/lib/nav.ts
- Modul-Routen mit requireModule-Layout und Platzhalterseite
- Message-Katalog je Namespace (messages/<locale>/<namespace>.json), fs-Loader
- check-module-guards: Modul-Key aus src/server/actions/<moduleKey>/
- Provisionierung, Admin-Konsole, Einstellungen, Files-Route, Mail entkoppelt
- Seed minimal (demo/demo2, Nutzer je Rolle); Fundament-Tests auf Role/
  NotificationPreference-Fixtures umgestellt

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

messages/en/admin.json

@@ -0,0 +1,58 @@
+{
+  "backToOverview": "Back to overview",
+  "crumb": "Tenant",
+  "sub": "Slug {slug}{sector}",
+  "statusActive": "Active",
+  "statusSuspended": "Suspended",
+  "statusArchived": "Archived",
+  "masterDataTitle": "Master data",
+  "masterDataHint": "Company data from the tenant settings.",
+  "orgName": "Company name",
+  "orgShort": "Short name",
+  "slug": "Slug",
+  "address": "Address",
+  "sector": "Sector",
+  "status": "Status",
+  "notSet": "—",
+  "mainContactTitle": "Main contact",
+  "mainContactHint": "Derived from the tenant administrator(s).",
+  "mainContactNone": "No active tenant administrator on record.",
+  "manageTitle": "Management",
+  "manageHint": "Manage this tenant's modules and users in a popup.",
+  "manageModules": "Manage modules",
+  "manageUsers": "Manage users",
+  "usersCount": "{count} users",
+  "modulesTitle": "Modules",
+  "modulesHint": "Disabled modules are hidden from the customer and blocked server-side.",
+  "moduleActive": "Active",
+  "moduleInactive": "Inactive",
+  "moduleActivate": "Activate",
+  "moduleDeactivate": "Deactivate",
+  "modulesModalSub": "Enable/disable modules for {name}",
+  "usersModalSub": "Users of {name} — create, roles, deactivate, reset password",
+  "lifecycleTitle": "Lifecycle",
+  "lifecycleActivate": "Activate",
+  "lifecycleSuspend": "Suspend (login blocked)",
+  "lifecycleArchive": "Archive",
+  "lifecycleNote": "Suspended tenants cannot sign in; archiving hides them.",
+  "mfaTitle": "MFA requirement",
+  "mfaHint": "When enabled, every user of this tenant must set up two-factor authentication at their next login. Currently: {state}.",
+  "mfaStateOn": "on",
+  "mfaStateOff": "off",
+  "mfaActivate": "Enable MFA requirement",
+  "mfaDeactivate": "Disable MFA requirement",
+  "auditTitle": "Audit trail",
+  "auditHint": "Traceable activity of this tenant — who changed what and when.",
+  "auditView": "View audit trail",
+  "auditSub": "Activity of {name} (newest first, last 200)",
+  "userCreate": "Create user",
+  "userCreateSub": "New user for {name}",
+  "userEdit": "Edit user — {name}",
+  "close": "Close",
+  "phone": "Phone",
+  "email": "E-mail",
+  "localeTitle": "Tenant language",
+  "localeHint": "Default language for notifications and documents of this tenant (users choose their own UI language). Currently: {lang}.",
+  "localeDe": "German",
+  "localeEn": "English"
+}