feat: T6 wave 3 – treatment books from lot, label print lock, restricted zone, authority notices

- Treatments book their dose from a medicine lot (delta booking on edit,
  bulk all-or-nothing, idempotent); Bestandsbuch columns from the lot,
  FEHLT exactly where treatmentLogGaps reports a gap; Bestandsbuch export
  needs veterinary-medicines:read.
- Label printing: 409 LABEL_PARTICULARS_MISSING on gaps, proof print with
  watermark, PRINT audit before the PDF, check endpoints; digit rules only
  from the seeded ComplianceSettings row (fail closed).
- Restricted zone (Berlin day): create, update, move, merge and CSV import
  blocked inside an active restriction; override with reason and
  compliance:manage, audited, never stored on the colony; split, harvest
  and dissolve stay free; restriction details only with compliance:read.
- Authority notices: settings, herd snapshot, registration/herd change/TSK
  notices with one open draft per kind under the settings lock.
- Label check refinements (geometric reading order, number|unit pairs).
- ARCHITECTURE.md §12.6–12.8, Annahmen 71–77; spec §5.6 Berlin day.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/test/colonies.e2e-spec.ts

@@ -148,6 +148,39 @@ describe('Colonies (e2e)', () => {
       .expect(403);
   });
 
+  it('accepts restrictionOverrideReason without a restriction, ignores it and never stores it', async () => {
+    const reason = 'Ohne Sperrbezirk wird die Begründung nur ignoriert';
+    const code = `V-${Date.now()}-R`;
+    const response = await request(app.getHttpServer())
+      .post('/api/v1/colonies')
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({
+        code,
+        apiaryId: apiaryAId,
+        colonyType: 'PRODUCTION_COLONY',
+        restrictionOverrideReason: reason,
+      })
+      .expect(201);
+    const created = response.body as ColonyBody;
+    splitColonyIds.push(created.id);
+    expect(JSON.stringify(created)).not.toContain(reason);
+    const stored = await prisma.colony.findUniqueOrThrow({
+      where: { id: created.id },
+    });
+    expect(JSON.stringify(stored)).not.toContain(reason);
+
+    await request(app.getHttpServer())
+      .post('/api/v1/colonies')
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({
+        code: `${code}2`,
+        apiaryId: apiaryAId,
+        colonyType: 'PRODUCTION_COLONY',
+        restrictionOverrideReason: 'zu kurz',
+      })
+      .expect(400);
+  });
+
   it('lets a BEEKEEPER create a colony', async () => {
     const response = await request(app.getHttpServer())
       .post('/api/v1/colonies')