rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_mcp_strict_args.py

@@ -13,7 +13,7 @@ one is close. An error the caller sees once beats data half-written forever.
 import pytest
 from mcp.server.mcpserver.exceptions import ToolError, UnexpectedToolError
 
-from scribe.mcp.server import StrictArgsMCPServer
+from grimoire.mcp.server import StrictArgsMCPServer
 
 
 def _echo_server() -> StrictArgsMCPServer:
@@ -103,7 +103,7 @@ async def test_a_crash_stays_masked():
 async def test_a_real_tools_refusal_reaches_the_caller():
     """Against the real server, on a refusal that needs no database: the
     message judge_menu writes for an empty verdict list."""
-    from scribe.mcp.server import build_mcp_server
+    from grimoire.mcp.server import build_mcp_server
 
     with pytest.raises(ToolError) as exc:
         await build_mcp_server().call_tool("judge_menu", {"log_id": 1, "verdicts": []})
@@ -114,7 +114,7 @@ async def test_the_real_server_refuses_content_on_create_note():
     """Against the REAL server: `content=` on create_note
     must raise before dispatch — naming the bad argument and listing `body`
     among the accepted ones — instead of creating a body-less note."""
-    from scribe.mcp.server import build_mcp_server
+    from grimoire.mcp.server import build_mcp_server
 
     mcp = build_mcp_server()
     assert isinstance(mcp, StrictArgsMCPServer)   # the guard is actually mounted