fix: close Walloon terrain provisioning

CHANGELOG.md

@@ -15,11 +15,18 @@
   official view-class crosswalk normalizes stacked codes to the existing
   11-class series, while source value `0` is explicitly treated as background
   nodata and never contributes to area metrics.
+- Exposed governed WALOUS rasters to the map evolution workspace and scoped
+  temporal-series choices to the selected persisted Area. The Wallonia golden
+  area now shows one unambiguous 2018/2020/2023 series instead of unrelated
+  acquisitions from other geometries.
 - Added bounded Walloon terrain acquisition from the official SPW MNT
   2021-2022 1 m GeoTIFF. Operator provisioning validates archive bounds, safe
   extraction, CRS, resolution, band count, elevation samples and checksums;
   selection persistence and terrain metrics retain DNG/EPSG:5710 instead of
   incorrectly labelling Walloon elevations as TAW.
+- Made terrain readiness fail closed on both the source raster and its valid
+  SHA-256 sidecar, wrote provisioning evidence atomically, and corrected the
+  persisted acquisition interval to the canonical `period` granularity.
 - Extended detection-model capabilities with machine-readable training scope,
   validation scope, validated regions, national-validation status and the
   operator-review requirement. The configured local model remains bound to
@@ -43,10 +50,12 @@
 - Added the current legal SPW Walloon flood-hazard polygons as a bounded
   authoritative vector product with class-aware hectare metrics and canonical
   persistence. No WMS pixels or modeled depths are fabricated.
-- Kept the Walloon DTM and MDK North Sea depth model honest: the published DTM
-  artifacts require an explicit large-storage partition plan, while the MDK
-  endpoint still fails strict hostname validation. Neither is presented as a
-  measured analytical layer.
+- Selected the official 1 m Walloon MNT after a live capacity audit and kept
+  the officially listed circa 198 GB 0.5 m distribution outside V1 because it
+  adds no required analytical capability and would require still more working
+  space during extraction. The MDK endpoint still fails strict hostname
+  validation and remains fail-closed rather than being presented as measured
+  North Sea bathymetry.
 - Extended the bounded all-in-one PostGIS recovery wait to 15 minutes and the
   immutable deploy health gate to 16 minutes. This prevents a large persistent
   data directory from being terminated mid-recovery by the former two- and