feat: add NIS2 landing page, roadmap page, and compliance section

- New /nis2 page: full Art. 21 mapping with covered/partial/roadmap/n-a
  tags, evidence-by-trigger breakdown, and roadmap callout
- New /roadmap page: planned and under-consideration items, NIS2-tagged
  items highlighted with monospace badge
- Home: new NIS2 section between screenshots and plugin block — Art. 21
  mapping list + MockCompliance UI + link to /nis2
- Features: new "Compliance & Audit (NIS2)" section
- Nav: Roadmap link added; NIS2 in Docs dropdown
- Footer: Roadmap and NIS2 links added
- docs/PRODUCT.md: NIS2 evidence foundation as value proposition #9
- docs/PAGES.md: /nis2, /roadmap, and NIS2 home section documented

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/pages/Features.tsx

@@ -127,6 +127,19 @@ const SECTIONS = [
       'VM interfaces and disks for Proxmox hosts',
     ],
   },
+  {
+    title: 'Compliance & Audit (NIS2)',
+    items: [
+      'Full audit log of all orchestration actions — who changed what, when (Art. 21 (2h))',
+      'RBAC with four built-in roles and custom permission sets — access control evidence',
+      'Per-device patch status and installed package list — patch management baseline (Art. 21 (2e))',
+      'Wazuh CVE counts by severity (critical / high / medium) linked to each device record',
+      'Config drift tracking: desired state vs. polled state — detect unauthorized changes',
+      'Security agent coverage report: which devices have Wazuh, Graylog, CrowdSec active',
+      'SNMP health metrics as continuous monitoring baseline (Art. 21 (2a))',
+      'Incident-relevant data per device: Wazuh alerts, CrowdSec decisions, syslog forwarding status (Art. 21 (2b))',
+    ],
+  },
   {
     title: 'Developer Experience',
     items: [