Add whole-factory HVAC requirement and process traceability spec

- facility-security.md: continuous temperature/humidity/PM control, zoned
  filtration, burning-season PM2.5 design point, HVAC in PV/battery sizing
- traceability.md: end-to-end per-order customer traceability, batch
  genealogy, log-at-source principles, machine data access as a
  procurement requirement

docs/facility-security.md

@@ -1,8 +1,37 @@
 # Facility: Security and Site Systems
 
-What the plant needs beyond the production machinery. Access control and
-CCTV are set requirements; the rest of this list is what a plant of this
-profile definitely needs, to be refined during site design.
+What the plant needs beyond the production machinery. Access control, CCTV,
+and whole-factory HVAC control are set requirements; the rest of this list
+is what a plant of this profile definitely needs, to be refined during site
+design.
+
+## Climate control: whole-factory HVAC
+
+The entire factory runs under continuous HVAC control, covering temperature,
+humidity, and particulate matter (PM). This is a set requirement, not an
+option per room.
+
+- **Temperature and humidity**: the process spec already demands 20-26 °C at
+  35-60% relative humidity for pressing; the same conditioning extends to
+  the whole building so materials, masters, packaging stock, and electronics
+  never sit outside controlled conditions. PVC compound and paper packaging
+  are both humidity-sensitive.
+- **Particulate matter**: filtration for the whole plant, with stricter
+  tiers by zone. Dust in a groove is an audible defect, so the cutting room
+  and galvanics clean room run at the tightest spec with positive pressure;
+  pressing and packaging run cleaner than ambient; offices and logistics at
+  a baseline tier. Northern Thailand's burning season (roughly February to
+  April) brings some of the world's worst PM2.5 episodes, so intake
+  filtration and building tightness must be designed for those peaks, not
+  for average days.
+- **Continuous monitoring and alarms**: temperature, humidity, and PM
+  sensors logging in every zone, with alarms on excursions, tied into the
+  plant monitoring below.
+- **Energy design**: conditioning a whole factory in a tropical climate is
+  a major electrical load on top of the 250 kW process cooling, and it must
+  be included in the solar PV and battery sizing from the start. Heat
+  recovery from the press hall (steam, hydraulics, and hot PVC all reject
+  heat) and from compressors should feed the design rather than fight it.
 
 ## Physical security
 
@@ -58,9 +87,9 @@ profile definitely needs, to be refined during site design.
 - **Lightning protection and grounding**: northern Thailand has intense
   storm seasons; the PV array, steel structures, and electronics all need a
   proper LPS and earthing design.
-- **Environmental monitoring**: temperature and humidity logging in
-  production (the process spec calls for 20-26 °C, 35-60% RH), the archive,
-  and the clean room.
+- **Environmental monitoring**: the whole-factory HVAC monitoring above
+  (temperature, humidity, PM in every zone), with the archive and clean room
+  as the most tightly alarmed spaces.
 
 ## Compliance anchors (Thailand)