Operationalize RC10 data retention

CHANGELOG.md

@@ -66,6 +66,16 @@
   the live three-viewport audit passed with zero horizontal overflow,
   console errors or failed requests and verified truthful delayed loading,
   keyboard behavior, accessible control names and visible timing feedback.
+- Added an RC-10 read-only data-operations audit covering storage lifecycle,
+  disk pressure, persisted-path integrity, old failed work and
+  national/regional/maritime source families.
+- Added dry-run-first orphan/cache cleanup with fail-closed path categories,
+  an explicit delete ceiling, exact confirmation token and a recent
+  checksum-verified database plus SHA-256 storage-backup requirement.
+- Mounted release backups read-only at `/app/backups` and applied the same
+  backup/confirmation guard to the older demo-export cleanup path.
+- Added a live RC-10 audit that proves critical table counts remain unchanged
+  across the storage report and cleanup dry run.
 - Added a read-only release-evidence manifest command with Git, migration,
   dependency, configuration checksum and optional live endpoint evidence.
 - Replaced the obsolete pre-build status with the current implemented