Add comprehensive documentation for key organizational aspects

- Introduced "Pension Scheme & Benefits" detailing secondary employment benefits and pension specifics.
- Created "Roles & Accountabilities" outlining the Holacracy role structure and responsibilities within Respellion.
- Added "Security" section covering GDPR compliance and workplace safety protocols.
- Established "Spending and Contracting" policy detailing expense categories and submission processes.
- Documented "Who We Are" to define Respellion's identity, services, and operational model under Holacracy and ISO 9001.

PROTECTED.md

@@ -1,34 +1,30 @@
 # Protected files — do not modify
 
-These files and directories must never be modified by Claude Code.
-They belong to the existing deployment pipeline and are frozen.
+These files and directories must never be modified by Claude Code without an
+explicit request. They belong to the deployment pipeline and the authoritative
+visual reference, and are otherwise frozen.
 
-## Pipeline and CI/CD
-.github/
+## Deployment & CI/CD
 .github/workflows/
-.gitlab-ci.yml (if present)
-
-## Container and orchestration
 Dockerfile
 docker-compose.yml
-docker-compose.prod.yml
-docker-compose.override.yml (if present)
+Caddyfile
+Caddyfile.test
 
-## Infrastructure and provisioning
-ansible/
-nginx/
+## Infrastructure & provisioning
+infra/                  (Ansible playbooks: development / production)
 
 ## Stylesheet
-stylesheet.css (repo root — use as-is, do not modify)
+stylesheet.css          (repo root — authoritative visual reference, use as-is)
 
-## Environment templates at repo root
-.env.example (repo root only — services may have their own)
-
-## Legacy prototype
-legacy/
+## Abandoned scaffolding (do not edit or rely on)
+app/                    (original Next.js + Qdrant design, never shipped — the real app is /src)
 
 ---
 
-The only infrastructure file that will change is Dockerfile, and only in
-Phase 8 step 8.5. That change is made manually by the human, not by
-Claude Code.
+Notes:
+- The active application lives entirely in `/src`. Editing the app means editing `/src`.
+- PocketBase schema changes go through `pb_migrations/` (and should be mirrored in
+  `scripts/setup-pb-collections.mjs`) — those are NOT frozen.
+- If a task genuinely requires touching a frozen file (e.g. a deliberate deployment
+  change), confirm with the human first.