Hub-and-Spoke Umbau: Multi-Tenant Zentrale + Satellite-Agent

- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit
- Satellite-API: heartbeat, poll (atomares Claiming), logs, result,
  scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht)
- Job-Queue: pending/claimed/running/success/failed + Stale-Janitor
- Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab
- Credentials bleiben lokal: nur symbolische credential_ref zentral
- Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich
- Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket
- Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner
- Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert

backend/app/services/audit.py

@@ -25,6 +25,7 @@ class AuditService:
         result: str = "success",
         details: dict[str, Any] | None = None,
         ip_address: str | None = None,
+        customer_id: int | None = None,
     ) -> AuditLog:
         entry = AuditLog(
             username=username,
@@ -33,6 +34,7 @@ class AuditService:
             result=result,
             details=json.dumps(details) if details else None,
             ip_address=ip_address,
+            customer_id=customer_id,
         )
         self.db.add(entry)
         await self.db.flush()
@@ -42,5 +44,6 @@ class AuditService:
             action=action,
             target=target,
             result=result,
+            customer_id=customer_id,
         )
         return entry