Data-centre intelligence: thermal digital twin, graph root-cause analysis, and safety-constrained cooling RL