Hub-and-Spoke Umbau: Multi-Tenant Zentrale + Satellite-Agent

- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit
- Satellite-API: heartbeat, poll (atomares Claiming), logs, result,
  scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht)
- Job-Queue: pending/claimed/running/success/failed + Stale-Janitor
- Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab
- Credentials bleiben lokal: nur symbolische credential_ref zentral
- Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich
- Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket
- Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner
- Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert

backend/app/api/routes/audit.py

@@ -19,6 +19,7 @@ async def list_audit_logs(
     page_size: int = Query(default=50, ge=1, le=200),
     action: str | None = None,
     username: str | None = None,
+    customer_id: int | None = None,
     db: AsyncSession = Depends(get_db),
     _admin: User = Depends(require_admin),
 ) -> AuditLogPage:
@@ -31,6 +32,9 @@ async def list_audit_logs(
     if username:
         stmt = stmt.where(AuditLog.username == username)
         count_stmt = count_stmt.where(AuditLog.username == username)
+    if customer_id is not None:
+        stmt = stmt.where(AuditLog.customer_id == customer_id)
+        count_stmt = count_stmt.where(AuditLog.customer_id == customer_id)
 
     total = await db.scalar(count_stmt) or 0
     stmt = stmt.offset((page - 1) * page_size).limit(page_size)