rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_mcp_tool_report_back_cue.py

@@ -16,14 +16,14 @@ pytestmark = pytest.mark.usefixtures("_bind_user")
 
 
 async def _update(owed=None, **kwargs):
-    from scribe.mcp.tools.tasks import update_task
+    from grimoire.mcp.tools.tasks import update_task
 
     note = MagicMock(id=5, user_id=7, project_id=3, started_at="2026-10-06T09:00:00+00:00")
     note.to_dict.return_value = {"id": 5}
-    with patch("scribe.mcp.tools.tasks.notes_svc.update_note", AsyncMock(return_value=note)), \
-         patch("scribe.mcp.tools.tasks.systems_tools.attach_systems", AsyncMock()), \
-         patch("scribe.mcp.tools.tasks.placement_svc.attach_placement", AsyncMock()), \
-         patch("scribe.mcp.tools.tasks.family_adoption_svc.owed_since",
+    with patch("grimoire.mcp.tools.tasks.notes_svc.update_note", AsyncMock(return_value=note)), \
+         patch("grimoire.mcp.tools.tasks.systems_tools.attach_systems", AsyncMock()), \
+         patch("grimoire.mcp.tools.tasks.placement_svc.attach_placement", AsyncMock()), \
+         patch("grimoire.mcp.tools.tasks.family_adoption_svc.owed_since",
                AsyncMock(return_value=list(owed or []))):
         return await update_task(task_id=5, **kwargs)
 
@@ -42,7 +42,7 @@ async def test_other_updates_do_not(kwargs):
 
 async def test_closing_carries_the_plain_cue_and_no_preference_key_of_its_own():
     """The retired key does not come back beside the moment delivery."""
-    from scribe.mcp.tools.tasks import REPORT_BACK_CUE
+    from grimoire.mcp.tools.tasks import REPORT_BACK_CUE
 
     out = await _update(status="done")
     assert "reply_preferences" not in out
@@ -56,7 +56,7 @@ _OWED = {"idea_id": 9, "idea_title": "Signed APK lane", "project_id": 4,
 async def test_closing_names_the_owed_adoptions_filed_while_the_task_was_open():
     """The finishing moment of family canon: owed family work filed
     into a project during this task comes back for the report to name."""
-    from scribe.services.family_adoption import OWED_CUE
+    from grimoire.services.family_adoption import OWED_CUE
 
     out = await _update(owed=[_OWED], status="done")
     assert out["family_owed"] == [_OWED]