Reorganize brain: projects/ top level, rename filenames, update homepage

- Moved everything from ideas/passepartout/ to projects/passepartout/
- Moved legal structures to projects/flags/
- Created missing _index.org files for all subdirectories
- Stripped redundant passepartout- prefix from filenames
- Rewrote root _index.org as generalized brain index (projects + concepts)
- Updated Hugo nav to Projects/Concepts
- Updated build script section descriptions
- Deleted stale ideas/passepartout-economics.md orphan

projects/passepartout/strategy/compliance/lfp-dppp.org

@@ -0,0 +1,25 @@
+:PROPERTIES:
+:ID:       bafdaa23-de0b-444c-9151-c87ac65add32
+:ID:       auto-lfp-dppp
+:CREATED:  [2026-05-23 Sat]
+:END:
+#+title: LFPDPPP (Ley Federal de Protección de Datos Personales — Mexico)
+#+filetags: :passepartout:compliance:framework:lfp:
+
+
+Mexico's federal privacy law (effective 2010, reformed 2024). Key requirements:
+consent, notice (privacy notice must specify the "responsible party"), purpose
+limitation, data subject rights (ARCO — access, rectification, cancellation,
+opposition + deletion, portability), cross-border data transfer limitations,
+security breach notification. INAI (National Institute for Transparency,
+Access to Information and Personal Data Protection) enforces.
+
+Penalties: Up to 1.9M days of minimum wage (~$5M USD); INAI can also
+suspend data processing.
+
+Why it matters: USMCA (US-Mexico-Canada Agreement) trade obligations are
+pushing toward privacy regime interoperability. A bilingual (Spanish/English)
+gate package covering both LFPDPPP and US frameworks serves the massive
+US-Mexico cross-border commerce market. First-mover advantage: LFPDPPP is
+less automated than [[id:513d5996-4ac7-4567-a992-18fc01599104][GDPR]]; the market has fewer vendors and lower expectations.
+