Basis: Certvia dev@a48c5fb als Fundament für Craftvia

Unveränderter Stand von certvia/dev (a48c5fb) plus Craftvia-Spezifikation
und Brandbook unter docs/craftvia/. ISMS-Module werden im Folgecommit entfernt.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

prisma/migrations/20260703081120_rls_suppliers/migration.sql

@@ -0,0 +1,16 @@
+-- RLS-Policies für die Lieferanten-Tabellen (analog zu row_level_security)
+DO $$
+DECLARE t text;
+BEGIN
+  FOREACH t IN ARRAY ARRAY[
+    'suppliers','supplier_assets','supplier_assessments','contracts','ndas',
+    'supplier_evidence','service_responsibilities','subcontractors',
+    'management_decisions','supplier_control_maturity'
+  ] LOOP
+    EXECUTE format('ALTER TABLE %I ENABLE ROW LEVEL SECURITY', t);
+    EXECUTE format(
+      'CREATE POLICY tenant_isolation ON %I USING (tenant_id = current_setting(''app.tenant_id'', true))',
+      t
+    );
+  END LOOP;
+END $$;