rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_snippet_drift_check.py

@@ -10,9 +10,9 @@ from types import SimpleNamespace
 
 import pytest
 
-from scribe.services import knowledge as knowledge_svc
-from scribe.services import snippets as snippets_svc
-from scribe.services.snippets import (
+from grimoire.services import knowledge as knowledge_svc
+from grimoire.services import snippets as snippets_svc
+from grimoire.services.snippets import (
     code_sha,
     compose_data,
     compose_verification,
@@ -254,7 +254,7 @@ async def test_recording_a_verdict_does_not_touch_the_body():
     )
     with (
         patch.object(snippets_svc, "get_snippet", AsyncMock(return_value=note)),
-        patch("scribe.services.access.can_write_note", AsyncMock(return_value=True)),
+        patch("grimoire.services.access.can_write_note", AsyncMock(return_value=True)),
         patch.object(
             snippets_svc.notes_svc, "update_note", AsyncMock(return_value=note)
         ) as upd,
@@ -276,7 +276,7 @@ async def test_recording_a_verdict_requires_write_access():
                            title="n — w", body="", tags=[], data=None)
     with (
         patch.object(snippets_svc, "get_snippet", AsyncMock(return_value=note)),
-        patch("scribe.services.access.can_write_note", AsyncMock(return_value=False)),
+        patch("grimoire.services.access.can_write_note", AsyncMock(return_value=False)),
         patch.object(snippets_svc.notes_svc, "update_note", AsyncMock()) as upd,
     ):
         assert await snippets_svc.record_verification(1, 5, status="ok") is None