Gravar-mail: Auditable Clean-in-Place Decision Support from Routine SWRO SCADA: Selecting Differential-Pressure Recovery and Falsifying a Per-CIP-Reset Trigger