feat: initial TrustOS platform scaffold

- FastAPI backend: auth, findings, dashboard, attack paths, footprint, AI translator, risk calculator, PDF report generator
- Next.js frontend: Vault dashboard, login, findings table, finding detail with AI coach, digital footprint, reports
- PostgreSQL data model: tenants, users, assets, findings, risk scores, audit reports, attack paths
- Docker Compose + Dockerfiles for all services
- Demo seed data: Acme Corp with 6 findings and 90-day risk score history
- AI Risk Translator (OpenAI/Anthropic) with plain-English business impact
- Role-based access: executive / it_admin / trustos_admin
- Scope-lock engine: authorization required before any assessment

Stage 1-8 complete: Phase 1 Vault Audit product ready

backend/.env.example

@@ -0,0 +1,25 @@
+# Database
+DATABASE_URL=postgresql+asyncpg://trustos:trustos_dev@postgres:5432/trustos
+SYNC_DATABASE_URL=postgresql://trustos:trustos_dev@postgres:5432/trustos
+
+# Auth
+SECRET_KEY=changeme-use-openssl-rand-hex-32-in-production
+ACCESS_TOKEN_EXPIRE_MINUTES=480
+
+# AI
+OPENAI_API_KEY=sk-...
+ANTHROPIC_API_KEY=sk-ant-...
+AI_PROVIDER=openai
+
+# External APIs
+HIBP_API_KEY=
+NVD_API_KEY=
+
+# Storage
+STORAGE_PATH=/app/storage
+
+# Email (optional)
+SMTP_HOST=
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASS=