Basis: Certvia dev@a48c5fb als Fundament für Craftvia

Unveränderter Stand von certvia/dev (a48c5fb) plus Craftvia-Spezifikation
und Brandbook unter docs/craftvia/. ISMS-Module werden im Folgecommit entfernt.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

prisma/migrations/20260812100000_backup_jobs/migration.sql

@@ -0,0 +1,28 @@
+-- Backup-Portal-Lane: Job-Status für Portal-Restore, Export-jetzt und DSGVO-Zustellung.
+-- GLOBAL (kein tenant_id-RLS, analog deletion_certificates) — Betreiber-/Plattform-Fähigkeit.
+
+-- CreateTable
+CREATE TABLE "backup_jobs" (
+    "id" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'queued',
+    "tenant_id" TEXT NOT NULL,
+    "tenant_slug" TEXT,
+    "subject_identity_id" TEXT,
+    "actor_id" TEXT,
+    "snapshot_id" TEXT,
+    "params" JSONB NOT NULL DEFAULT '{}',
+    "result" JSONB,
+    "error" TEXT,
+    "download_token" TEXT,
+    "download_expires_at" TIMESTAMP(3),
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "backup_jobs_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "backup_jobs_download_token_key" ON "backup_jobs"("download_token");
+CREATE INDEX "backup_jobs_tenant_id_idx" ON "backup_jobs"("tenant_id");
+CREATE INDEX "backup_jobs_status_idx" ON "backup_jobs"("status");