Backend-enforced field masking for dak_mitarbeiter, disclosure request workflow with 24h expiry, admin approval page, and frontend adaptations. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>