Fundament: ISMS-Module entfernt; Craftvia-Rollen, Module, Navigation, i18n-Split

- ISMS-Routen, Actions, Server-/Lib-Code, Komponenten, Prisma-Modelle, Seeds,
  Importer, Skripte und ISMS-Tests entfernt (Fundament bleibt: Auth, Identity,
  MFA/WebAuthn, RBAC, Audit, Mail, Storage, Backup/DSGVO, Plattform-Admin)
- Schema auf Fundament-Modelle reduziert; TenantSettings generisch (+phone/email)
- TENANT_MODELS (db.ts, backup/topology.ts) und PII-Felder ausgedünnt
- RBAC: Rollen tenant-admin/backoffice/team-lead/technician + Craftvia-Permissions
- Modul-Katalog (customers, sites, teams, work_orders, imports, field, reports,
  emergency, documents, notifications, lotse) + Navigation aus src/lib/nav.ts
- Modul-Routen mit requireModule-Layout und Platzhalterseite
- Message-Katalog je Namespace (messages/<locale>/<namespace>.json), fs-Loader
- check-module-guards: Modul-Key aus src/server/actions/<moduleKey>/
- Provisionierung, Admin-Konsole, Einstellungen, Files-Route, Mail entkoppelt
- Seed minimal (demo/demo2, Nutzer je Rolle); Fundament-Tests auf Role/
  NotificationPreference-Fixtures umgestellt

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

scripts/test-backup-portal.ts

@@ -43,7 +43,7 @@ async function cleanup() {
     await prisma.tombstoneEntry.deleteMany({ where: { tenantId: t.id } });
     await prisma.deletionCertificate.deleteMany({ where: { tenantId: t.id } });
     await prisma.auditLog.deleteMany({ where: { tenantId: t.id } });
-    await prisma.asset.deleteMany({ where: { tenantId: t.id } });
+    await prisma.notificationPreference.deleteMany({ where: { tenantId: t.id } });
     await prisma.userRole.deleteMany({ where: { user: { tenantId: t.id } } });
     await prisma.user.deleteMany({ where: { tenantId: t.id } });
     await prisma.role.deleteMany({ where: { tenantId: t.id } });
@@ -109,7 +109,7 @@ async function main() {
   const tenant = await prisma.tenant.create({ data: { name: "Portal Test", slug: SLUG } });
   const identity = await prisma.identity.create({ data: { email: EMAIL, passwordHash: "x", status: "ACTIVE" } });
   const user = await prisma.user.create({ data: { tenantId: tenant.id, identityId: identity.id, email: EMAIL, name: "Portal Person" } });
-  await prisma.asset.create({ data: { tenantId: tenant.id, name: "Asset der Person", type: "SYSTEM", ownerId: user.id, createdBy: user.id } });
+  await prisma.notificationPreference.create({ data: { tenantId: tenant.id, userId: user.id, eventType: "work_order_assigned", email: false } });
 
   // ── (4a) DSGVO-Paket (Per-Person) direkt ────────────────────────────────────
   console.log("\n(4) DSGVO-Zustellpaket:");