feat: T6 wave 5 – readiness checks and report, compliance and medicine UI, label UI

- Readiness: all 18 checks (medicine lots, treatment log gaps, labels,
  harvest withdrawal), medicine subjects masked without
  veterinary-medicines:read, report PDF (counts only), summary cached 60 s,
  409 codes READINESS_*.
- Frontend: /compliance page with acknowledge/revoke, dashboard line and
  nav; veterinary medicine catalogue, lots, movement book with inventory
  and disposal; label designer check panel, print card with gap list and
  proof print, food business master data, product legal name.
- Service worker: cacheability is path-based (the backend sends no-store
  on every answer); compliance, medicine, restriction, notice and label
  check/print paths and restricted document kinds are never cached.
- ARCHITECTURE.md §2, §12.10–12.11, Annahmen 86–90.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Frontend/src/app/(app)/nav-config.spec.ts

@@ -65,4 +65,14 @@ describe("nav-config", () => {
     expect(item?.label).toBe("Vorschläge");
     expect(item?.counter).toBe("suggestions");
   });
+
+  it("shows Prüfbereitschaft only with compliance:read", () => {
+    expect(hrefs([])).not.toContain("/compliance");
+    expect(hrefs(["compliance:read"])).toContain("/compliance");
+    const group = visibleNavGroups({ permissions: ["compliance:read"] }).find((g) =>
+      g.items.some((item) => item.href === "/compliance"),
+    );
+    expect(group?.label).toBe("Betrieb");
+    expect(group?.items.find((item) => item.href === "/compliance")?.label).toBe("Prüfbereitschaft");
+  });
 });