Complete temporal detection safety gate

CHANGELOG.md

@@ -27,6 +27,21 @@
 - Made system capabilities report real PostGIS and configured local YOLO
   state, added request IDs and exception logging, reduced SQL engine logging,
   and terminalized impossible orphaned work after all-in-one restarts.
+- Added non-logging PostgreSQL credential rotation with atomic `.env` update,
+  role update, managed-container restart and health verification.
+- Completed a current secure Tower backup and isolated restore drill with
+  PostGIS, Alembic and critical table-count reconciliation.
+- Removed every implicit first-raster fallback from Detection Lab; raster
+  selection is now an explicit operator decision in normal runs, guided runs
+  and calibration.
+- Added fail-closed detection source and QA temporal compatibility checks.
+  Historical orthophotos marked unsupported cannot run through the current
+  model, and historical QA requires an overlapping reference validity period.
+- Persisted the temporal compatibility decision in existing QualityCheck
+  parameters/findings and added correlated request, job, analysis-run and
+  quality-check logging.
+- Added a read-only stale-runtime report plus an explicitly confirmed
+  reconciliation mode.
 
 ## Sprint 240 Operational forest, agriculture, nature and soil themes (2026-07-17)