fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

- Make D3FEND defense cards clickable with expandable details and external link
- Fix D3FEND URLs to use PascalCase technique names matching the ontology
- Remove duplicate Import Atomic Red Team from System page (use Data Sources)
- Add bulk Activate All / Deactivate All buttons with confirmation modal
- Fix template admin list to show both active and inactive templates
- Add PATCH /test-templates/bulk-activate backend endpoint
- Auto-seed data sources on container startup via entrypoint.sh
- Fix SigmaHQ, CALDERA, GTFOBins import issues
- Register D3FEND sync handler in data sources router
- Add CIS Controls v8 compliance framework import
- Expand Test Catalog source filters (CALDERA, LOLBAS, GTFOBins)
- Campaign Generate from Threat Actor now opens actor selector modal
- Add coverage snapshot creation button to Comparison page
- Update README with accurate data source and feature documentation

backend/app/routers/compliance.py

@@ -24,7 +24,10 @@ from app.models.technique import Technique
 from app.models.test_template import TestTemplate
 from app.models.threat_actor import ThreatActorTechnique
 from app.services.scoring_service import calculate_technique_score
-from app.services.compliance_import_service import import_nist_800_53_mappings
+from app.services.compliance_import_service import (
+    import_nist_800_53_mappings,
+    import_cis_controls_v8_mappings,
+)
 
 router = APIRouter(prefix="/compliance", tags=["compliance"])
 
@@ -378,3 +381,13 @@ def import_nist(
     """Import NIST 800-53 Rev 5 mappings (admin only)."""
     result = import_nist_800_53_mappings(db)
     return result
+
+
+@router.post("/import/cis-controls-v8")
+def import_cis(
+    db: Session = Depends(get_db),
+    current_user: User = Depends(require_role("admin")),
+):
+    """Import CIS Controls v8 mappings (admin only)."""
+    result = import_cis_controls_v8_mappings(db)
+    return result