feat: T6 wave 5 – readiness checks and report, compliance and medicine UI, label UI

- Readiness: all 18 checks (medicine lots, treatment log gaps, labels,
  harvest withdrawal), medicine subjects masked without
  veterinary-medicines:read, report PDF (counts only), summary cached 60 s,
  409 codes READINESS_*.
- Frontend: /compliance page with acknowledge/revoke, dashboard line and
  nav; veterinary medicine catalogue, lots, movement book with inventory
  and disposal; label designer check panel, print card with gap list and
  proof print, food business master data, product legal name.
- Service worker: cacheability is path-based (the backend sends no-store
  on every answer); compliance, medicine, restriction, notice and label
  check/print paths and restricted document kinds are never cached.
- ARCHITECTURE.md §2, §12.10–12.11, Annahmen 86–90.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Frontend/src/lib/auth/api-client.spec.ts

@@ -94,6 +94,13 @@ describe("api-client", () => {
     });
   });
 
+  it("apiFetchBlob passes the request options on, e.g. cache: no-store", async () => {
+    const fetchMock = vi.fn().mockResolvedValue(new Response("pdf"));
+    vi.stubGlobal("fetch", fetchMock);
+    await apiFetchBlob("/x", "f.pdf", { cache: "no-store" });
+    expect((fetchMock.mock.calls[0][1] as RequestInit).cache).toBe("no-store");
+  });
+
   it("apiFetchBlob builds an ApiError with the parsed body", async () => {
     vi.stubGlobal("fetch", vi.fn().mockResolvedValue(jsonResponse(403, { message: "Nein", why: 1 })));
     const error = (await apiFetchBlob("/x", "f.csv").catch((e: unknown) => e)) as ApiError;