rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_forge_webhook.py

@@ -19,8 +19,8 @@ import hmac
 import pytest
 import pytest_asyncio
 
-from scribe.routes.webhooks import delivered_signature, push_facts, signature_ok
-from scribe.services.snippets import _path_touches
+from grimoire.routes.webhooks import delivered_signature, push_facts, signature_ok
+from grimoire.services.snippets import _path_touches
 from tests.helpers import ensure_user
 
 SECRET = "wh-secret"
@@ -113,8 +113,8 @@ def test_path_touches_uses_the_location_semantics():
 
 
 def test_route_is_registered_and_unauthenticated_by_design():
-    from scribe.app import create_app
-    from scribe.routes import webhooks as wh
+    from grimoire.app import create_app
+    from grimoire.routes import webhooks as wh
 
     assert callable(wh.forge_push)
     rules = {r.rule for r in create_app().url_map.iter_rules()}
@@ -127,10 +127,10 @@ def test_route_is_registered_and_unauthenticated_by_design():
 @pytest_asyncio.fixture
 async def seeded(_dispose_engine):
     """User + project + binding + two verified snippets + one unverified."""
-    from scribe.models import async_session
-    from scribe.models.project import Project
-    from scribe.services import snippets as svc
-    from scribe.services.repo_bindings import set_binding
+    from grimoire.models import async_session
+    from grimoire.models.project import Project
+    from grimoire.services import snippets as svc
+    from grimoire.services.repo_bindings import set_binding
 
     async with async_session() as s:
         user = await ensure_user(s, "webhook_itest")
@@ -165,7 +165,7 @@ async def seeded(_dispose_engine):
 
 @pytest.mark.integration
 async def test_push_flags_matched_verdicts_and_replay_is_quiet(seeded):
-    from scribe.services import snippets as svc
+    from grimoire.services import snippets as svc
 
     flagged = await svc.invalidate_for_push(
         "git.example.com/alice/widget",
@@ -207,7 +207,7 @@ async def test_push_flags_matched_verdicts_and_replay_is_quiet(seeded):
 
 @pytest.mark.integration
 async def test_reverifying_clears_the_flag(seeded):
-    from scribe.services import snippets as svc
+    from grimoire.services import snippets as svc
 
     await svc.invalidate_for_push(
         "git.example.com/alice/widget", changed=["src/x.py"], removed=[],
@@ -227,7 +227,7 @@ async def test_reverifying_clears_the_flag(seeded):
 
 @pytest.mark.integration
 async def test_unbound_repo_flags_nothing(seeded):
-    from scribe.services import snippets as svc
+    from grimoire.services import snippets as svc
 
     flagged = await svc.invalidate_for_push(
         "github.com/somebody/else", changed=["src/x.py"], removed=[],