[FEAT] Integrazione analisi docs/nis2 v1.7.0 — scoring asset, tassonomia incidenti, PIR, NIST CSF, fonti certe

Fase 1 - Asset Relevance Scoring NIS2 (GV.OC-04): metodologia 0-100 a 6 criteri,
  AssetScoringService + endpoint scoringGrid/score/relevantSystems + UI assets.html + registro stampabile.
Fase 2 - Tassonomia incidenti Determina ACN 164179/2025: IS-1..4 + regime essenziale/importante (Allegati 3/4).
Fase 3 - Post-Incident Review (5-Whys) + metriche TTD/TTC/TTR + timestamp di fase.
Fase 4 - Mapping NIST CSF 2.0 (43 controlli) reference-only.
Fonti certe: registry config/nis2_sources.php + grounding AI (vieta riferimenti inventati) +
  citazioni help.js + ingest PDF normativi nella KB RAG (scripts/ingest-nis2-sources.php).
Migrazioni 020/021/022 (additive idempotenti). Fix VectorService IP Qdrant (drift .5->.3).
Analisi concorrenza Evix (docs/EVIX_ANALISI_CONCORRENZA.html, gap-driven).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

public/index.php

@@ -230,6 +230,9 @@ $actionMap = [
         'POST:{id}/notification'          => 'sendNotification',
         'POST:{id}/finalReport'           => 'sendFinalReport',
         'POST:{id}/aiClassify'            => 'aiClassify',
+        'GET:{id}/metrics'                => 'metrics',
+        'GET:{id}/pir'                    => 'getPir',
+        'POST:{id}/pir'                   => 'savePir',
     ],
 
     // ── PolicyController ────────────────────────────
@@ -269,10 +272,13 @@ $actionMap = [
     'assets' => [
         'GET:list'                  => 'list',
         'POST:create'               => 'create',
+        'GET:scoringGrid'           => 'scoringGrid',
+        'GET:relevantSystems'       => 'relevantSystems',
+        'GET:dependencyMap'         => 'dependencyMap',
         'GET:{id}'                  => 'get',
         'PUT:{id}'                  => 'update',
         'DELETE:{id}'               => 'delete',
-        'GET:dependencyMap'         => 'dependencyMap',
+        'POST:{id}/score'           => 'score',
     ],
 
     // ── AuditController ─────────────────────────────
@@ -284,7 +290,9 @@ $actionMap = [
         'GET:report'                => 'generateReport',
         'GET:logs'                  => 'getAuditLogs',
         'GET:iso27001Mapping'       => 'getIsoMapping',
+        'GET:nistCsfMapping'        => 'getNistCsfMapping',
         'GET:executiveReport'       => 'executiveReport',
+        'GET:relevantSystemsRegister' => 'relevantSystemsRegister',
         'GET:export'                => 'export',
         'GET:chainVerify'           => 'chainVerify',
         'GET:exportCertified'       => 'exportCertified',