feat(quick-access): add governed DSAR coverage

src/govoplan_quick_access/backend/manifest.py

@@ -11,6 +11,7 @@ from govoplan_core.core.module_guards import (
     persistent_table_uninstall_guard,
 )
 from govoplan_core.core.modules import (
+    CapabilityDocumentation,
     DocumentationLink,
     DocumentationTopic,
     FrontendModule,
@@ -25,6 +26,10 @@ from govoplan_core.core.provider_governance import declared_module_architecture
 from govoplan_core.core.views import ViewSurface
 from govoplan_core.db.base import Base
 from govoplan_quick_access.backend.db import models as quick_access_models
+from govoplan_quick_access.backend.dsar_provider import (
+    QUICK_ACCESS_DSAR_CAPABILITY,
+    QuickAccessDsarProvider,
+)
 
 
 MODULE_ID = "quick_access"
@@ -111,7 +116,56 @@ def _router(context: ModuleContext):
     return create_router(context.registry)
 
 
+def _dsar_provider(_context: ModuleContext) -> QuickAccessDsarProvider:
+    return QuickAccessDsarProvider()
+
+
 DOCUMENTATION = (
+    DocumentationTopic(
+        id="quick-access.data-subject-requests",
+        title="Quick Access data-subject requests",
+        summary=(
+            "Export or delete personal rail preferences while retaining "
+            "institutional Quick Access policy."
+        ),
+        body=(
+            "Quick Access contributes the user profile owned by the exact account "
+            "in the active tenant. The access package contains bounded category and "
+            "tool availability and ordering preferences but never follows a tool "
+            "into Mail, Postbox, Tasks, Files, or another owner module. Tenant policy "
+            "records are included only as minimized creation or update attribution "
+            "when the subject account performed that action; their preference payload "
+            "is excluded and their attribution is retained as institutional evidence. "
+            "System-wide policy is outside tenant-scoped requests. Erasure deletes "
+            "only the selected personal profile after owner and revision checks. The "
+            "effective rail then falls back to current module, system, and tenant "
+            "defaults, including all locked or forced items. A repeated execution is "
+            "unchanged and no tool or domain data is modified."
+        ),
+        layer="configured",
+        documentation_types=("admin", "user"),
+        audience=("user", "tenant_admin", "operator", "auditor"),
+        related_modules=("core", "access", "views"),
+        metadata={
+            "help_contexts": [
+                "quick_access.rail",
+                "quick_access.settings.personal",
+                "quick_access.admin.tenant",
+                "privacy.data-subject-requests",
+            ],
+            "consequence_classes": {
+                "export_personal_profile": (
+                    "Returns bounded rail preferences, never tool-owned data."
+                ),
+                "delete_personal_profile": (
+                    "Removes personal overrides; governed defaults apply again."
+                ),
+                "retain_tenant_attribution": (
+                    "Preserves minimized tenant-policy accountability evidence."
+                ),
+            },
+        },
+    ),
     DocumentationTopic(
         id="quick-access.user",
         title="Quick Access rail",
@@ -229,10 +283,25 @@ manifest = ModuleManifest(
     provides_interfaces=(
         ModuleInterfaceProvider(name="quick_access.runtime", version="1.0.0"),
         ModuleInterfaceProvider(name="quick_access.preferences", version="1.0.0"),
+        ModuleInterfaceProvider(
+            name=QUICK_ACCESS_DSAR_CAPABILITY,
+            version="0.1.0",
+        ),
     ),
     permissions=PERMISSIONS,
     role_templates=ROLE_TEMPLATES,
     route_factory=_router,
+    capability_factories={QUICK_ACCESS_DSAR_CAPABILITY: _dsar_provider},
+    capability_documentation={
+        QUICK_ACCESS_DSAR_CAPABILITY: CapabilityDocumentation(
+            label="Quick Access data-subject request provider",
+            summary=(
+                "Exports and deletes personal Quick Access preferences while "
+                "retaining minimized tenant-policy attribution."
+            ),
+            contract_version="0.1.0",
+        ),
+    },
     frontend=FrontendModule(
         module_id=MODULE_ID,
         package_name="@govoplan/quick-access-webui",