rename(547): the plugin is grimoire — manifest, MCP key, hooks, env, skills

Step 3 of the Scribe -> Grimoire rename.

- Plugin `grimoire` in marketplace `grimoire-plugin`, MCP server key
  `grimoire`, so tools reach a session as mcp__plugin_grimoire_grimoire__*.
- hooks/scribe_* -> hooks/grimoire_*, their shell functions and the TMPDIR
  ledgers with them; SCRIBE_URL / SCRIBE_TOKEN / SCRIBE_HOOK_DIR /
  SCRIBE_LEDGER_DIRS -> GRIMOIRE_*; the project marker is `.grimoire`.
- skills/using-scribe -> using-grimoire, /grimoire:sync, stored processes
  arrive as grimoire-proc-<slug>; moment_actions names them the same way.
- Migration 0124 rewrites stored skill names (rule_moments,
  rule_moment_judgments, moment_mappings) from scribe:/scribe-proc- to
  grimoire:/grimoire-proc-, so a rule mounted on a skill keeps firing.
- Settings' install commands and MCP-only defaults, the docs and the
  tests follow.
- scripts/check_plugin.py drops the smoke event for a report-check hook
  that has no file in plugin/hooks.

Kept on purpose: the secret-sealing label, and the names that let backups
written as Scribe restore and be counted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/grimoire/routes/plugin.py

@@ -73,7 +73,7 @@ async def session_context():
             active project is determined — the plugin never pins a project id.
         project_id (optional int) — the project named directly, and the only
             key a caller outside a git repo has: the plugin's hooks
-            send it when a `.scribe` marker file names a project. Takes
+            send it when a `.grimoire` marker file names a project. Takes
             precedence over `repo`. Access-checked like any other read — an id
             this account cannot read loads no project rather than failing.
         source (optional str) — the host's SessionStart source (startup,
@@ -467,7 +467,7 @@ async def write_path_prior_art():
                              are the ones shown in full on this call.
         (Returns a `checkpoint` block on the same contract as /tool-rules —
         see that endpoint. The write-path HOOK deliberately does not act on
-        it: scribe_prior_art.sh carries a tested property that it never
+        it: grimoire_prior_art.sh carries a tested property that it never
         returns a permissionDecision, because a recall aid must not stand in
         the way of a write. The block is computed and
         returned so that decision can be revisited with evidence rather than
@@ -602,7 +602,7 @@ async def shape_check():
 async def claim_session():
     """Bind the harness's session id to the caller's live claim on a task.
 
-    Called by `scribe_claim_session.sh` after `update_task` / `add_task_log`.
+    Called by `grimoire_claim_session.sh` after `update_task` / `add_task_log`.
     The server has already stamped the claim on that write; this only says
     WHICH session made it — an id the harness reported, not one the model
     asserted. A GET for the reason every plugin endpoint is one: a read-scoped
@@ -631,7 +631,7 @@ async def claim_session():
 async def release_session():
     """Release the claims a session held, as it ends.
 
-    Called by `scribe_session_end.sh`. Best-effort by design: SessionEnd does
+    Called by `grimoire_session_end.sh`. Best-effort by design: SessionEnd does
     not fire on a crash, so the claim's lease — not this call — is what makes a
     dead session's claim read as dead. This only makes the common case tidy.
 
@@ -650,8 +650,8 @@ async def release_session():
 async def process_manifest():
     """Stored Processes as skill-stub specs for the plugin's sync script.
 
-    The plugin's `scribe_sync_processes.sh` (run at SessionStart and via the
-    `/scribe:sync` command) curls this and writes one auto-surfacing local skill
+    The plugin's `grimoire_sync_processes.sh` (run at SessionStart and via the
+    `/grimoire:sync` command) curls this and writes one auto-surfacing local skill
     per Process into ~/.claude/skills/. See services/plugin_context.
     build_process_manifest. A read-scoped API key suffices.
     """