rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_retrieval_scopes.py

@@ -26,10 +26,10 @@ def spy():
     """Patch semantic_search_notes everywhere it's imported and capture kwargs."""
     mock = AsyncMock(return_value=[])
     targets = [
-        "scribe.services.embeddings.semantic_search_notes",
-        "scribe.services.plugin_context.semantic_search_notes",
-        "scribe.mcp.tools.search.semantic_search_notes",
-        "scribe.routes.search.semantic_search_notes",
+        "grimoire.services.embeddings.semantic_search_notes",
+        "grimoire.services.plugin_context.semantic_search_notes",
+        "grimoire.mcp.tools.search.semantic_search_notes",
+        "grimoire.routes.search.semantic_search_notes",
     ]
     patches = [patch(t, mock) for t in targets]
     for p in patches:
@@ -41,11 +41,11 @@ def spy():
 
 @pytest.mark.asyncio
 async def test_mcp_search_uses_read_scope(spy):
-    from scribe.mcp._context import _user_id_ctx
+    from grimoire.mcp._context import _user_id_ctx
     token = _user_id_ctx.set(7)
     try:
-        with patch("scribe.services.retrieval_telemetry.record_retrieval", MagicMock()):
-            from scribe.mcp.tools.search import search
+        with patch("grimoire.services.retrieval_telemetry.record_retrieval", MagicMock()):
+            from grimoire.mcp.tools.search import search
             await search(q="debounce")
     finally:
         _user_id_ctx.reset(token)
@@ -56,7 +56,7 @@ async def test_mcp_search_uses_read_scope(spy):
 async def test_auto_inject_uses_browse_scope(spy):
     """The one retrieval nobody requested. A record shared one-to-one with the
     operator must never arrive this way."""
-    from scribe.services import plugin_context
+    from grimoire.services import plugin_context
     with patch.object(plugin_context, "get_autoinject_config",
                       AsyncMock(return_value={"enabled": True, "threshold": 0.55,
                                               "top_k": 5})), \
@@ -71,7 +71,7 @@ async def test_dedup_gate_uses_own_scope(spy):
     one — no session needed. The gate blocks a create and tells the caller to
     update the match instead, so matching another user's record would refuse
     their write and point them at something they may not be able to edit."""
-    from scribe.services import dedup
+    from grimoire.services import dedup
     await dedup.find_duplicate_note(
         7, "", body="x" * 400, project_id=None, is_task=False,
     )
@@ -81,7 +81,7 @@ async def test_dedup_gate_uses_own_scope(spy):
 @pytest.mark.asyncio
 async def test_hybrid_search_halves_agree_on_scope():
     """The keyword half and the semantic half of one search must see equally."""
-    from scribe.services import knowledge
+    from grimoire.services import knowledge
 
     captured: dict[str, object] = {}
 
@@ -89,8 +89,8 @@ async def test_hybrid_search_halves_agree_on_scope():
         captured["scope"] = kwargs.get("scope")
         return []
 
-    from scribe.models.note import Note
-    with patch("scribe.services.embeddings.semantic_search_notes",
+    from grimoire.models.note import Note
+    with patch("grimoire.services.embeddings.semantic_search_notes",
                AsyncMock(side_effect=fake_semantic)), \
          patch.object(knowledge, "readable_notes_clause",
                       MagicMock(return_value=(Note.user_id == 7))) as read_clause, \
@@ -116,7 +116,7 @@ async def test_hybrid_search_halves_agree_on_scope():
 async def test_injected_menu_attributes_another_users_note():
     """Auto-inject can surface a collaborator's note via a shared project. The
     menu line is the only provenance the agent sees, so it has to name them."""
-    from scribe.services import plugin_context
+    from grimoire.services import plugin_context
 
     mine, theirs = fake_note(id=1, title="Mine", user_id=7), fake_note(id=2, title="Theirs", user_id=9)
     with patch.object(plugin_context, "semantic_search_notes",
@@ -143,7 +143,7 @@ async def test_injected_menu_labels_the_record_kind():
     """Every injected line renders the same shape, so without a kind marker a
     recorded snippet is indistinguishable from a stray dev-log — exactly where
     prior art most needs to stand out."""
-    from scribe.services import plugin_context
+    from grimoire.services import plugin_context
 
     hits = [
         (0.92, fake_note(id=1, title="debounce — rate-limit a callback", note_type="snippet")),
@@ -194,7 +194,7 @@ def test_list_shaped_services_use_the_shared_visibility_clause():
     import inspect
     import textwrap
 
-    from scribe.services import knowledge, notes
+    from grimoire.services import knowledge, notes
 
     for fn, label in ((notes.list_notes, "notes.list_notes"),
                       (knowledge.query_knowledge, "knowledge.query_knowledge")):