rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_shared_provenance.py

@@ -22,12 +22,12 @@ def _session_returning_rows(rows):
 
 @pytest.mark.asyncio
 async def test_label_marks_only_foreign_rows():
-    from scribe.services.access import label_shared_items
+    from grimoire.services.access import label_shared_items
     items = [
         {"id": 1, "user_id": 7},   # mine
         {"id": 2, "user_id": 9},   # someone else's
     ]
-    with patch("scribe.services.access.async_session") as cls:
+    with patch("grimoire.services.access.async_session") as cls:
         cls.return_value = _session_returning_rows([(9, "alex")])
         out = await label_shared_items(user_id=7, items=items)
 
@@ -42,8 +42,8 @@ async def test_label_marks_only_foreign_rows():
 async def test_label_skips_the_query_when_everything_is_mine():
     """No foreign rows means no user lookup at all — labelling shouldn't cost a
     query on the common single-owner path."""
-    from scribe.services.access import label_shared_items
-    with patch("scribe.services.access.async_session") as cls:
+    from grimoire.services.access import label_shared_items
+    with patch("grimoire.services.access.async_session") as cls:
         out = await label_shared_items(user_id=7, items=[{"id": 1, "user_id": 7}])
         cls.assert_not_called()
     assert out == [{"id": 1, "user_id": 7}]
@@ -51,20 +51,20 @@ async def test_label_skips_the_query_when_everything_is_mine():
 
 @pytest.mark.asyncio
 async def test_provenance_is_empty_for_your_own_record():
-    from scribe.services.access import describe_provenance
+    from grimoire.services.access import describe_provenance
     note = MagicMock(id=1, user_id=7)
     assert await describe_provenance(user_id=7, note=note) == {}
 
 
 @pytest.mark.asyncio
 async def test_provenance_names_the_owner_and_permission():
-    from scribe.services.access import describe_provenance
+    from grimoire.services.access import describe_provenance
     note = MagicMock(id=1, user_id=9)
     owner = MagicMock(username="alex")
     session = make_mock_session()
     session.get = AsyncMock(return_value=owner)
-    with patch("scribe.services.access.async_session") as cls, \
-         patch("scribe.services.access.get_note_permission",
+    with patch("grimoire.services.access.async_session") as cls, \
+         patch("grimoire.services.access.get_note_permission",
                AsyncMock(return_value="viewer")):
         cls.return_value = session
         got = await describe_provenance(user_id=7, note=note)
@@ -76,7 +76,7 @@ async def test_shared_process_skill_stub_never_claims_to_be_the_operators():
     """The stub description IS the skill's auto-surface trigger and the only
     provenance a reader sees. For a shared Process it must name the author and
     require a go-ahead — never read as "the operator's saved process"."""
-    from scribe.services import plugin_context
+    from grimoire.services import plugin_context
 
     items = [
         {"id": 1, "title": "Drift Audit", "snippet": "Sweep for drift.", "user_id": 7},