[BACKUP] Sessione 2026-06-14: supervisore autonomo + contesto + mig.039 + UI V2 plan

- Supervisore autonomo ticket: prompt operativo + dry-run (scripts/), DRAFT rimosso; gate normativo gia' committato
- docs/CONTEXT_LAST_SESSION.md: sessione 2026-06-14 (supervisore LIVE, run#1/#2, rotazione Anthropic rinviata)
- docs/sql/039_integrity_keys.sql: migrazione integrita' DB (PK/UNIQUE/FK) gia' applicata in prod 12/6
- docs/MIGRATION_UI_V2.md: piano migrazione UI V2
- docs/nis2/incidente_r00/: 2 mockup incidente (gateway+dashboard)
- .gitignore: versiona public/vendor/ (asset Bootstrap Italia self-hosted)
- Fix accumulati: EmailService (kill-switch email), Incident/Onboarding/Organization/Services controllers, questionnaire, ReportService, CLAUDE.md standard

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

public/docs/api.html

@@ -327,7 +327,7 @@ GET /api/services/risks-feed?api_key=nis2_abc123def456...</code></pre>
                     <span class="auth-tag auth-apikey">read:incidents</span>
                 </div>
                 <div class="endpoint-body">
-                    <p class="endpoint-desc">Feed incidenti con status Art.23 (deadlines 24h/72h/30d) e flag di scadenza. Utile per integrare in SIEM e SOC dashboard.</p>
+                    <p class="endpoint-desc">Feed incidenti con status Art.23 (deadlines 24h/72h/1 mese) e flag di scadenza. Utile per integrare in SIEM e SOC dashboard.</p>
                     <h4 class="params-title">Query Parameters</h4>
                     <table class="params-table">
                         <thead><tr><th>Parametro</th><th>Tipo</th><th>Descrizione</th></tr></thead>

public/docs/testing-simulazione.html

@@ -452,12 +452,12 @@
             <div class="sim-card orange">
                 <div class="sim-num">SIM-02</div>
                 <div class="sim-title">Incidente Ransomware Art.23</div>
-                <div class="sim-desc">Simula un attacco ransomware critico su DataCore S.r.l. con attivazione della timeline obbligatoria NIS2 (early warning 24h, notification 72h, final report 30d).</div>
+                <div class="sim-desc">Simula un attacco ransomware critico su DataCore S.r.l. con attivazione della timeline obbligatoria NIS2 (early warning 24h, notification 72h, final report 1 mese).</div>
                 <div class="sim-steps">
                     <div class="sim-step">→ <span>Creazione incidente severity=critical</span></div>
                     <div class="sim-step">→ <span>AI classify: categoria, suggerimenti, severity</span></div>
                     <div class="sim-step">→ <span>Early warning CSIRT (24h)</span></div>
-                    <div class="sim-step">→ <span>Notification formale (72h) + final report (30d)</span></div>
+                    <div class="sim-step">→ <span>Notification formale (72h) + final report (1 mese)</span></div>
                 </div>
             </div>