[FEAT] Visura auto-fill, adesione volontaria, modulo NCR/CAPA

1. Fix auto-fill visura: mapping corretto suggested_sector e employees_range,
   indicatori visivi verdi sui campi auto-compilati, fatturato sempre manuale
2. Adesione volontaria: colonna voluntary_compliance, checkbox in onboarding
   step 5 quando not_applicable, toggle in settings, reset su ri-classificazione
3. Modulo NCR/CAPA: NonConformityController con 10 endpoint API,
   tabelle non_conformities + capa_actions, generazione NCR dai gap assessment,
   predisposizione integrazione SistemiG.agile (webhook + sync)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

public/js/api.js

@@ -264,6 +264,19 @@ class NIS2API {
 
     fetchCompany(vatNumber) { return this.post('/onboarding/fetch-company', { vat_number: vatNumber }); }
     completeOnboarding(data) { return this.post('/onboarding/complete', data); }
+
+    // ═══════════════════════════════════════════════════════════════════
+    // Non-Conformity & CAPA
+    // ═══════════════════════════════════════════════════════════════════
+
+    listNCRs(params = {}) { return this.get('/ncr/list?' + new URLSearchParams(params)); }
+    createNCR(data) { return this.post('/ncr/create', data); }
+    getNCR(id) { return this.get(`/ncr/${id}`); }
+    updateNCR(id, data) { return this.put(`/ncr/${id}`, data); }
+    addCapa(ncrId, data) { return this.post(`/ncr/${ncrId}/capa`, data); }
+    updateCapa(capaId, data) { return this.put(`/ncr/capa/${capaId}`, data); }
+    createNCRsFromAssessment(assessmentId) { return this.post('/ncr/from-assessment', { assessment_id: assessmentId }); }
+    getNCRStats() { return this.get('/ncr/stats'); }
 }
 
 // Singleton globale