rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_divergence_meaning_gate.py

@@ -25,8 +25,8 @@ import inspect
 import textwrap
 from unittest.mock import AsyncMock, patch
 
-from scribe.services import shape_ledger
-from scribe.services.shape_ledger import _semantic_canon
+from grimoire.services import shape_ledger
+from grimoire.services.shape_ledger import _semantic_canon
 
 # Comfortably over WRITEPATH_MIN_CODE_CHARS (48 non-whitespace characters), so
 # these tests exercise the comparison rather than the substance guard. A real
@@ -53,7 +53,7 @@ def _hits(*hits: tuple[float, int]) -> AsyncMock:
 
 
 def _patch(mock: AsyncMock):
-    return patch("scribe.services.embeddings.semantic_search_notes", mock)
+    return patch("grimoire.services.embeddings.semantic_search_notes", mock)
 
 
 # ── the arm proposes on a hit ────────────────────────────────────────────
@@ -95,7 +95,7 @@ async def test_the_arm_proposes_at_the_write_path_floor() -> None:
     """It asks the write-path hint's question of the same documents, so it
     uses that surface's floor — not a stricter private one that yields no
     proposals for the judge to weigh."""
-    from scribe.services.plugin_context import WRITEPATH_DEFAULT_THRESHOLD
+    from grimoire.services.plugin_context import WRITEPATH_DEFAULT_THRESHOLD
 
     mock = _hits()
     with _patch(mock):
@@ -140,7 +140,7 @@ def test_the_capped_pass_reads_new_shapes_first() -> None:
     highest ids — was flagged before the arm could propose for it."""
     from datetime import datetime, timedelta, timezone
 
-    from scribe.services.shape_ledger import _semantic_priority
+    from grimoire.services.shape_ledger import _semantic_priority
 
     t = datetime(2026, 9, 22, tzinfo=timezone.utc)
     rows = [