feat: add governed hydrology and historical imagery

backend/README.md

@@ -1121,16 +1121,40 @@ is never presented as a complete result.
 
 ## Bounded official orthophoto acquisition
 
-`POST /api/v1/projects/{project_id}/datasets/orthophoto/acquire` accepts an
-explicit EPSG:4326 map rectangle and stores the official Digitaal Vlaanderen
-`OMWRGBMRVL`/`Ortho` response as a canonical EPSG:31370 raster Dataset. The
+`GET /api/v1/projects/{project_id}/datasets/orthophoto/products` lists the
+governed product allowlist. `POST .../datasets/orthophoto/acquire` accepts an
+explicit EPSG:4326 map rectangle plus `product_key` and stores the official
+Digitaal Vlaanderen WMS response as a canonical EPSG:31370 raster Dataset. The
 default safety envelope is 128-1,024 m per side, 1 m/pixel, 32 MiB and a
 24-hour exact-request cache. It runs synchronously behind the existing Job
 abstraction and never during startup.
 
+Available products cover the most recent winter image, annual winter mosaics
+for 2012-2025, three older winter periods, RGB 1979-1990 and panchromatic 1971.
+Historical products persist validity metadata and are deliberately excluded
+from configured-YOLO/current-GRB QA. `GET .../datasets/{dataset_id}/raster/image`
+is the constrained binary PNG endpoint used by the MapLibre image overlay.
+
 Settings: `ORTHOPHOTO_ENABLED`, `ORTHOPHOTO_WMS_URL`,
 `ORTHOPHOTO_WMS_LAYER`, `ORTHOPHOTO_RESOLUTION_M`,
 `ORTHOPHOTO_MIN_SIDE_M`, `ORTHOPHOTO_MAX_SIDE_M`,
 `ORTHOPHOTO_TIMEOUT_SECONDS`, `ORTHOPHOTO_MAX_RESPONSE_MB` and
 `ORTHOPHOTO_CACHE_TTL_HOURS`. Keep the official HTTPS URL and 1 m profile
 unless a separately verified deployment/model profile requires a change.
+
+## Waterinfo station histories
+
+Run the explicit operator after the regional workspace and Mol Area exist:
+
+```bash
+docker exec geointel python /app/scripts/provision_waterinfo_station_history.py \
+  --project-name "Kempen Regional Workbench" \
+  --area-name "Gemeente Mol" \
+  --from-year 2013 --to-year 2025
+```
+
+The command retains raw KiWIS JSON/checksums and imports only real annual
+observations through the canonical dataset upload API. Every station has its
+own temporal-series key. Water levels and discharges remain Point measurements;
+they are never averaged across stations or presented as municipal water volume.
+Use `--fetch-only` to prepare and audit artifacts without persistence.