rename(547): the plugin is grimoire — manifest, MCP key, hooks, env, skills

Step 3 of the Scribe -> Grimoire rename.

- Plugin `grimoire` in marketplace `grimoire-plugin`, MCP server key
  `grimoire`, so tools reach a session as mcp__plugin_grimoire_grimoire__*.
- hooks/scribe_* -> hooks/grimoire_*, their shell functions and the TMPDIR
  ledgers with them; SCRIBE_URL / SCRIBE_TOKEN / SCRIBE_HOOK_DIR /
  SCRIBE_LEDGER_DIRS -> GRIMOIRE_*; the project marker is `.grimoire`.
- skills/using-scribe -> using-grimoire, /grimoire:sync, stored processes
  arrive as grimoire-proc-<slug>; moment_actions names them the same way.
- Migration 0124 rewrites stored skill names (rule_moments,
  rule_moment_judgments, moment_mappings) from scribe:/scribe-proc- to
  grimoire:/grimoire-proc-, so a rule mounted on a skill keeps firing.
- Settings' install commands and MCP-only defaults, the docs and the
  tests follow.
- scripts/check_plugin.py drops the smoke event for a report-check hook
  that has no file in plugin/hooks.

Kept on purpose: the secret-sealing label, and the names that let backups
written as Scribe restore and be counted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_guidance_ownership.py

@@ -97,7 +97,7 @@ def delivered_surfaces() -> dict[str, str]:
     surfaces = {
         "instructions": match.group(1),
         "docstrings": "".join(p.read_text() for p in sorted((ROOT / "src/grimoire/mcp/tools").glob("*.py"))),
-        "static": (ROOT / "plugin/hooks/scribe_static_context.md").read_text(),
+        "static": (ROOT / "plugin/hooks/grimoire_static_context.md").read_text(),
         "commands": "".join(p.read_text() for p in sorted((ROOT / "plugin/commands").glob("*.md"))),
         "live": _live_session_context_source(),
         "shapes": _delivered_shapes(),
@@ -122,11 +122,11 @@ class Topic(NamedTuple):
     shared_with: tuple[str, ...] = ()  # other surfaces allowed the statement, with a reason
 
 
-U = "skill:using-scribe"
+U = "skill:using-grimoire"
 
 TOPICS: tuple[Topic, ...] = (
-    # ── the working reflexes — owned by the using-scribe skill ──
-    Topic("scribe is the system of record; keep one copy", U, ("one copy",),
+    # ── the working reflexes — owned by the using-grimoire skill ──
+    Topic("grimoire is the system of record; keep one copy", U, ("one copy",),
           "let any existing local memory shrink", index=("one copy",)),
     Topic("orient: enter the project, check repo bindings", U, ("enter_project", "list_repo_bindings"),
           "the milestones and open tasks worked on most recently",
@@ -195,7 +195,7 @@ TOPICS: tuple[Topic, ...] = (
           "whichever home it gets"),
     Topic("a rule vs the other entities", U, ("standing instruction",), "first ask whether it's a rule at all"),
     # Moments. Delivery at a moment and its in-session
-    # corrections are owned by using-scribe's moments.md; the index carries one
+    # corrections are owned by using-grimoire's moments.md; the index carries one
     # clause, and a new rule's moments are asked where its home and trigger are.
     Topic("rules mounted on a moment arrive by lookup; correct a misfire in-session", U,
           ("list_moments", "map_action", "unmap_action", "judge_rule_moments"),
@@ -294,7 +294,7 @@ TOPICS: tuple[Topic, ...] = (
     # ── per-tool contracts and in-band behaviour — owned by the server ──
     Topic("closing a task cues the report", "docstrings", ("report_back",), "reporting this to the operator?"),
     # The agent is the judge. Two topics, not one, because they fire
-    # at different moments and say different things: using-scribe owns the
+    # at different moments and say different things: using-grimoire owns the
     # authority — what you may decide and that deciding means READING, not
     # thresholding — while reporting-back owns the shape a report takes when
     # the judgment is made. They are stated separately rather than shared so
@@ -323,7 +323,7 @@ TOPICS: tuple[Topic, ...] = (
     Topic("an unbound repo gets a bind hint", "live", ("bind_repo",), "isn't mapped to a grimoire project"),
     # ── the Claude Code adapter's own conventions ──
     Topic("compact at clean seams", "static", ("/compact",), "compact at clean seams"),
-    Topic("stored processes sync into local skills", "commands", ("scribe-proc-",), "regenerate the local skill stubs"),
+    Topic("stored processes sync into local skills", "commands", ("grimoire-proc-",), "regenerate the local skill stubs"),
     Topic("say so when grimoire's tools are unavailable", "static", ("tools are unavailable",),
           "rather than silently falling back to local notes"),
 )
@@ -430,7 +430,7 @@ def test_the_ownership_guards_can_fail():
 #   - "claude", "~/.claude", ".claude/"   the client itself and its paths
 #   - "claude.md", "memory.md", "auto-memory", "automemoryenabled"
 #                                          Claude Code's local memory files/setting
-#   - "/compact", "/scribe:"               Claude Code slash commands
+#   - "/compact", "/grimoire:"               Claude Code slash commands
 #   - "sessionstart", "userpromptsubmit", "pretooluse", "posttooluse"
 #                                          Claude Code hook event names
 #   - "write/edit"                         Claude Code's editor tool names
@@ -439,7 +439,7 @@ def test_the_ownership_guards_can_fail():
 # name, while "bash" in prose is just the shell.
 CLIENT_SPECIFIC = (
     "claude", "~/.claude", ".claude/", "claude.md", "memory.md", "auto-memory",
-    "automemoryenabled", "/compact", "/scribe:", "sessionstart", "userpromptsubmit",
+    "automemoryenabled", "/compact", "/grimoire:", "sessionstart", "userpromptsubmit",
     "pretooluse", "posttooluse", "write/edit", "claude_plugin_root",
 )
 CLIENT_TOOL_NAME = re.compile(r"\bBash\b")