[FEAT] Asset import CMDB/cloud + scoring automatico GV.OC-04 (P2)

- AssetScoringService::inferCriteria: euristica 6 criteri da campi CMDB
  (criticality, data_classification, internet_facing, dependencies, regulated)
- AssetController::import (JWT org_admin/compliance_manager) + bulkUpsert condiviso:
  upsert dedup su external_ref, scoring auto GV.OC-04, max 1000 asset/batch
- ServicesController::ingestAssets -> POST /services/assets-ingest (scope ingest:assets) per connettori CMDB/cloud
- Migrazione 025: assets += external_ref + discovery_source + indice univoco dedup
- Route POST:assetsIngest (services) + POST:import (assets)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

public/index.php

@@ -273,6 +273,7 @@ $actionMap = [
     'assets' => [
         'GET:list'                  => 'list',
         'POST:create'               => 'create',
+        'POST:import'               => 'import',
         'GET:scoringGrid'           => 'scoringGrid',
         'GET:relevantSystems'       => 'relevantSystems',
         'GET:dependencyMap'         => 'dependencyMap',
@@ -351,6 +352,7 @@ $actionMap = [
         'POST:incidentsIngest'       => 'ingestIncident',   // P1: ingestion alert SIEM/SOC/EDR
         'POST:evidenceIngest'        => 'ingestEvidence',   // P1: evidence automation (collector connettori)
         'GET:controlsMonitoring'     => 'controlsMonitoring', // P1: continuous control monitoring
+        'POST:assetsIngest'          => 'ingestAssets',     // P2: import asset CMDB/cloud + scoring GV.OC-04
         'GET:controlsStatus'         => 'controlsStatus',
         'GET:assetsCritical'         => 'assetsCritical',
         'GET:suppliersRisk'          => 'suppliersRisk',