fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

- Make D3FEND defense cards clickable with expandable details and external link
- Fix D3FEND URLs to use PascalCase technique names matching the ontology
- Remove duplicate Import Atomic Red Team from System page (use Data Sources)
- Add bulk Activate All / Deactivate All buttons with confirmation modal
- Fix template admin list to show both active and inactive templates
- Add PATCH /test-templates/bulk-activate backend endpoint
- Auto-seed data sources on container startup via entrypoint.sh
- Fix SigmaHQ, CALDERA, GTFOBins import issues
- Register D3FEND sync handler in data sources router
- Add CIS Controls v8 compliance framework import
- Expand Test Catalog source filters (CALDERA, LOLBAS, GTFOBins)
- Campaign Generate from Threat Actor now opens actor selector modal
- Add coverage snapshot creation button to Comparison page
- Update README with accurate data source and feature documentation

frontend/src/api/compliance.ts

@@ -114,3 +114,9 @@ export async function importNistMappings(): Promise<Record<string, unknown>> {
   const { data } = await client.post("/compliance/import/nist-800-53");
   return data;
 }
+
+/** Import CIS Controls v8 mappings (admin). */
+export async function importCisMappings(): Promise<Record<string, unknown>> {
+  const { data } = await client.post("/compliance/import/cis-controls-v8");
+  return data;
+}