[FIX] SIM-06 + EmailService + WebhookService + supplier assessment

- ServicesController::provision(): created_by usa userId (INT) non string
- EmailService::logEmail(): rimosso sent_at (colonna non esiste in email_log)
- WebhookService::incidentPayload(): status ?? 'detected' (null-safe)
- simulate-nis2.php: supplier assessment usa formato assessment_responses
  corretto [{question, weight, value: yes|partial|no}]

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

application/services/WebhookService.php

@@ -237,7 +237,7 @@ class WebhookService
                 'title'           => $incident['title'],
                 'classification'  => $incident['classification'],
                 'severity'        => $incident['severity'],
-                'status'          => $incident['status'],
+                'status'          => $incident['status'] ?? 'detected',
                 'is_significant'  => (bool)$incident['is_significant'],
                 'detected_at'     => $incident['detected_at'],
                 'art23_deadlines' => [