rename(547): the server is grimoire — package, image, DB defaults, backups

Step 2 of the Scribe -> Grimoire rename.

- src/scribe -> src/grimoire, and every import, patch target, module path,
  hypercorn entry point and `python -m grimoire.restore` with it; pyproject,
  uv.lock and the frontend package are named grimoire.
- Image git.fabledsword.com/bvandeusen/fabledgrimoire; CI's Postgres service
  runs as grimoire / grimoire_test.
- Compose files default the DB user, database and (prod) volume to grimoire,
  each overridable from .env, so an install created as Scribe keeps its data
  by setting POSTGRES_USER, POSTGRES_DB and PGDATA_VOLUME.
- Backups are written as grimoire-<ts>.tar with format grimoire-backup-tar.
  Archives named scribe-* with the scribe-backup-tar manifest still restore
  and are still counted at the destination (folder and S3), with tests.
- Exports, the MCP auth realm, the ASGI scope key and the persistent logger
  carry the new name.

Kept on purpose: the secret-sealing key label stays "scribe.secrets.v1",
because every stored secret was derived under it.

Plugin identity (plugin name, hooks, env vars, .scribe marker, skills) is
step 3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_wide_net.py

@@ -24,7 +24,7 @@ from unittest.mock import AsyncMock, patch
 
 import pytest
 
-from scribe.mcp.tools import wide_net
+from grimoire.mcp.tools import wide_net
 from tests.helpers import FakeMCP, fake_rule, tool_doc
 
 
@@ -158,7 +158,7 @@ def test_the_wide_net_is_not_one_of_the_tunable_push_surfaces():
     rows would move the near-miss distributions that step is arguing from, and
     would offer a floor to tune on a tool whose whole point is not having one.
     """
-    from scribe.services.retrieval_surfaces import SURFACES
+    from grimoire.services.retrieval_surfaces import SURFACES
 
     assert wide_net.SOURCE not in SURFACES
 
@@ -167,7 +167,7 @@ def test_the_wide_net_is_not_ambient_either():
     """Ambient means a delivery nobody chose. This one is chosen by definition
     — somebody called the tool — so counting it as ambient would make a
     deliberate ask read as a bulk hand-over."""
-    from scribe.services.note_usage import AMBIENT_SOURCES
+    from grimoire.services.note_usage import AMBIENT_SOURCES
 
     assert wide_net.SOURCE not in AMBIENT_SOURCES
 
@@ -208,7 +208,7 @@ def test_the_docstring_says_when_to_reach_for_it():
     name the MOMENT, not just the parameters — including the one that prompted
     it, where a session hands work back rather than finishing it.
     """
-    doc = tool_doc("scribe.mcp.tools.wide_net", "what_might_apply").lower()
+    doc = tool_doc("grimoire.mcp.tools.wide_net", "what_might_apply").lower()
 
     assert "consequential" in doc
     assert "handing work back" in doc
@@ -220,7 +220,7 @@ def test_the_docstring_says_when_to_reach_for_it():
 
 
 def test_it_is_registered_and_readable_with_a_read_key():
-    from scribe.mcp.server import _READ_ONLY_TOOLS
+    from grimoire.mcp.server import _READ_ONLY_TOOLS
 
     mcp = FakeMCP()
     wide_net.register(mcp)
@@ -233,7 +233,7 @@ def test_the_instruction_surfaces_point_at_it():
     behaviour, so a tool the reflex never learns about is not shipped."""
     import pathlib
 
-    from scribe.mcp import server
+    from grimoire.mcp import server
 
     assert "what_might_apply" in server._INSTRUCTIONS