rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/grimoire/services/note_drafts.py

@@ -0,0 +1,66 @@
+from sqlalchemy import select, text
+
+from grimoire.models import async_session
+from grimoire.models.note_draft import NoteDraft
+
+
+async def upsert_draft(
+    user_id: int,
+    note_id: int,
+    proposed_body: str,
+    original_body: str,
+    instruction: str,
+    scope: str,
+) -> NoteDraft:
+    async with async_session() as session:
+        await session.execute(
+            text("""
+                INSERT INTO note_drafts (note_id, user_id, proposed_body, original_body, instruction, scope)
+                VALUES (:note_id, :user_id, :proposed_body, :original_body, :instruction, :scope)
+                ON CONFLICT (note_id, user_id) DO UPDATE SET
+                    proposed_body = EXCLUDED.proposed_body,
+                    original_body = EXCLUDED.original_body,
+                    instruction   = EXCLUDED.instruction,
+                    scope         = EXCLUDED.scope,
+                    updated_at    = NOW()
+            """).bindparams(
+                note_id=note_id,
+                user_id=user_id,
+                proposed_body=proposed_body,
+                original_body=original_body,
+                instruction=instruction,
+                scope=scope,
+            )
+        )
+        await session.commit()
+        result = await session.execute(
+            select(NoteDraft).where(
+                NoteDraft.note_id == note_id, NoteDraft.user_id == user_id
+            )
+        )
+        return result.scalars().first()
+
+
+async def get_draft(user_id: int, note_id: int) -> NoteDraft | None:
+    async with async_session() as session:
+        result = await session.execute(
+            select(NoteDraft).where(
+                NoteDraft.note_id == note_id, NoteDraft.user_id == user_id
+            )
+        )
+        return result.scalars().first()
+
+
+async def delete_draft(user_id: int, note_id: int) -> bool:
+    async with async_session() as session:
+        result = await session.execute(
+            select(NoteDraft).where(
+                NoteDraft.note_id == note_id, NoteDraft.user_id == user_id
+            )
+        )
+        draft = result.scalars().first()
+        if draft is None:
+            return False
+        await session.delete(draft)
+        await session.commit()
+        return True