GRC in Germany 2026: Automating NIS2 and BDSG Compliance