[Maffooch]

Description

Docs for DefectDojo Pro: CRA Article 14 reporting now works on an instance without PSIRT, so its page moves out of the PSIRT section and describes the flow that needs no PSIRT.

• Moves psirt/cra-article14-reporting.md to federal_compliance/cra_article14_reporting.md, with an alias so /psirt/cra-article14-reporting/ keeps working, and updates the FAQ link.
• Describes the ways to start a report: the exploited-finding suggestion on the Asset page and the finding page, Start CRA Report in the finding menu, the renamed New CRA Report button, and the PSIRT case and advisory where PSIRT is enabled.
• Submission notes now go to the findings that carry a vulnerability ID named in Advisory Reference.
• Notifications: the scheduled check runs every 15 minutes with or without PSIRT, and how the "CRA deadline due soon / breached" notifications are delivered.
• New section on the CRA Article 14 Deadlines dashboard widget.
• eu_evidence_packs.md: VH-4 without PSIRT, and the new rules for VH-5, VH-6 and RP-1 to RP-6, with their computed facts.
• regulatory_profile.md: what reads the CRA product class now, with or without PSIRT.

Test results

Docs only. Checked every link the pages reference resolves to an existing page in this tree.

Documentation

This PR is the documentation.

Checklist

• Make sure to rebase your PR against the very latest dev.
• Submit all PRs, features and bug fixes alike, against the dev branch.
• Give a meaningful name to your PR, as it may end up being used in the release notes.