fix(security): 16 mittlere Probleme behoben (P18-P33)

P18: require_permission zu forgejo_error_reporter und ai_ui_control routes hinzugefügt
P19: Cross-Tenant Permission-Cache-Invalidierung bei Rollenänderungen
P20: Session/Permission-Cache-Invalidierung bei Gruppen-Änderungen
P21: ENTITY_MODELS Registry um fehlende Plugin-Modelle erweitert
P22: Entity-Links prüfen verknüpfte Entity-Permissions
P23: authStore persist Middleware entfernt (kein localStorage mehr)
P24: 5xx Retry nur noch für GET-Requests
P25: KI-Kommentar in address.py (bekannte Inkonsistenz)
P26: DeletionLog in EntityHistory gemerged (action=delete)
P27: KI-Kommentar in entity_policy.py (ABAC nicht aktiv genutzt)
P28: db.commit() aus bulk_permission_service entfernt
P29: CSV-Export in export_service.py ausgelagert
P30: plugins.py Business-Logik in plugin_install_service.py ausgelagert
P31: KI-Kommentar in session.py (Dual-System dokumentiert)
P32: Migration 0115: crm_platform_admin Role droppen
P33: Cross-Plugin Imports über contracts.py behoben (10 Violations → 0)

app/services/entity_permission_service.py

@@ -116,6 +116,76 @@ try:
 except ImportError:
     pass
 
+# Additional plugin models with OwnedMixin
+try:
+    from app.plugins.builtins.mail.models import MailMessage
+    ENTITY_MODELS["mail_message"] = MailMessage
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.kommunikation.models import CommConversation
+    ENTITY_MODELS["comm_conversation"] = CommConversation
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.tags.models import Tag
+    ENTITY_MODELS["tag"] = Tag
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.agent_memory.models import AgentMemory
+    ENTITY_MODELS["agent_memory"] = AgentMemory
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.graph_rag.models import EntityRelationship
+    ENTITY_MODELS["entity_relationship"] = EntityRelationship
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.report_generator.models import ReportTemplate, ReportInstance
+    ENTITY_MODELS["report_template"] = ReportTemplate
+    ENTITY_MODELS["report_instance"] = ReportInstance
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.entity_links.models import EntityLink
+    ENTITY_MODELS["entity_link"] = EntityLink
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.kommunikation.models import CommConversation as CommConv
+    ENTITY_MODELS["comm_conversation"] = CommConv
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.ai_proactive.models import ProactiveSuggestion
+    ENTITY_MODELS["proactive_suggestion"] = ProactiveSuggestion
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.ai_assistant.models import AIAgent, AIChatSession
+    ENTITY_MODELS["ai_agent"] = AIAgent
+    ENTITY_MODELS["ai_chat_session"] = AIChatSession
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.permissions.models import ShareLink
+    ENTITY_MODELS["share_link"] = ShareLink
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.automation.models import AgentDefinition, AutomationDefinition
+    ENTITY_MODELS["agent_definition"] = AgentDefinition
+    ENTITY_MODELS["automation_definition"] = AutomationDefinition
+except ImportError:
+    pass
+try:
+    from app.plugins.builtins.mcp_client.models import McpServerConfig
+    ENTITY_MODELS["mcp_server_config"] = McpServerConfig
+except ImportError:
+    pass
+
 
 def _get_entity_model(entity_type: str) -> type:
     """Get SQLAlchemy model class for entity_type, or raise ValueError."""