chore: rename project Roundtable → Steward

Renames the Python package directory, CLI command, env var prefix,
docker-compose service/container/image, Postgres role/db, and all
visible branding. Marketing form is "Fabled Steward".

Clean break from the previous rebrand: drops the fabledscryer→roundtable
import shim in __init__.py and the FABLEDSCRYER_* env var fallback in
config.py and migrations/env.py. Env vars are now STEWARD_* only.

Heads-up for existing deployments:
- Postgres user/db renamed fabledscryer → steward in docker-compose.yml.
  Existing volumes need the role/db renamed inside Postgres, or override
  POSTGRES_USER/POSTGRES_DB to keep the old names.
- Host-agent systemd unit is now steward-agent.service. Existing agents
  keep running under the old name; reinstall to switch.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

tests/conftest.py

@@ -2,7 +2,7 @@ import pytest
 import pytest_asyncio
 from pathlib import Path
 import textwrap
-from roundtable.app import create_app
+from steward.app import create_app
 
 
 @pytest.fixture

tests/core/test_settings_public_base_url.py

@@ -7,7 +7,7 @@ quart.current_app so the helper runs in isolation.
 from types import SimpleNamespace
 import pytest
 
-from roundtable.core import settings as settings_module
+from steward.core import settings as settings_module
 
 
 def _fake_request(host_url: str) -> SimpleNamespace:

tests/plugins/host_agent/test_agent_config.py

@@ -7,12 +7,12 @@ from plugins.host_agent.agent import read_config, ConfigError
 def test_parses_flat_key_value(tmp_path):
     p = tmp_path / "agent.conf"
     p.write_text(
-        "url = https://roundtable.example\n"
+        "url = https://steward.example\n"
         "token = abc123\n"
         "interval_seconds = 45\n"
     )
     cfg = read_config(str(p))
-    assert cfg["url"] == "https://roundtable.example"
+    assert cfg["url"] == "https://steward.example"
     assert cfg["token"] == "abc123"
     assert cfg["interval_seconds"] == 45
 

tests/plugins/host_agent/test_install_template.py

@@ -46,12 +46,12 @@ def test_render_contains_hardening_directives():
 def test_render_has_uninstall_branch():
     out = _render()
     assert "--uninstall" in out
-    assert "systemctl disable --now roundtable-agent.service" in out
+    assert "systemctl disable --now steward-agent.service" in out
 
 
 def test_render_has_systemctl_enable():
     out = _render()
-    assert "systemctl enable --now roundtable-agent.service" in out
+    assert "systemctl enable --now steward-agent.service" in out
 
 
 def test_render_uses_agent_py_url():

tests/test_app.py

@@ -1,5 +1,5 @@
 import pytest
-from roundtable.app import create_app
+from steward.app import create_app
 
 
 @pytest.mark.asyncio

tests/test_auth.py

@@ -1,7 +1,7 @@
 import pytest
 import bcrypt
 from unittest.mock import AsyncMock, patch
-from roundtable.models.users import User, UserRole
+from steward.models.users import User, UserRole
 
 
 def make_user(role=UserRole.admin):
@@ -23,7 +23,7 @@ async def test_login_page_returns_200(client):
 
 @pytest.mark.asyncio
 async def test_login_redirects_to_setup_when_no_users(client, app):
-    with patch("roundtable.auth.routes.get_user_count", new=AsyncMock(return_value=0)):
+    with patch("steward.auth.routes.get_user_count", new=AsyncMock(return_value=0)):
         response = await client.get("/login")
     assert response.status_code == 302
     assert "/setup" in response.headers["Location"]
@@ -32,8 +32,8 @@ async def test_login_redirects_to_setup_when_no_users(client, app):
 @pytest.mark.asyncio
 async def test_login_success_redirects_to_dashboard(client, app):
     user = make_user()
-    with patch("roundtable.auth.routes.get_user_count", new=AsyncMock(return_value=1)), \
-         patch("roundtable.auth.routes.get_user_by_username", new=AsyncMock(return_value=user)):
+    with patch("steward.auth.routes.get_user_count", new=AsyncMock(return_value=1)), \
+         patch("steward.auth.routes.get_user_by_username", new=AsyncMock(return_value=user)):
         response = await client.post("/login", form={"username": "admin", "password": "password"})
     assert response.status_code == 302
     assert "/" in response.headers["Location"]
@@ -42,8 +42,8 @@ async def test_login_success_redirects_to_dashboard(client, app):
 @pytest.mark.asyncio
 async def test_login_failure_returns_400(client, app):
     user = make_user()
-    with patch("roundtable.auth.routes.get_user_count", new=AsyncMock(return_value=1)), \
-         patch("roundtable.auth.routes.get_user_by_username", new=AsyncMock(return_value=user)):
+    with patch("steward.auth.routes.get_user_count", new=AsyncMock(return_value=1)), \
+         patch("steward.auth.routes.get_user_by_username", new=AsyncMock(return_value=user)):
         response = await client.post("/login", form={"username": "admin", "password": "wrong"})
     assert response.status_code == 400
 

tests/test_config.py

@@ -1,25 +1,25 @@
 import os
 import textwrap
 import pytest
-from roundtable.config import load_bootstrap
+from steward.config import load_bootstrap
 
 
 def test_load_bootstrap_from_yaml(tmp_path):
     cfg_file = tmp_path / "config.yaml"
     cfg_file.write_text(textwrap.dedent("""\
         database:
-          url: postgresql+asyncpg://user:pass@localhost/roundtable
+          url: postgresql+asyncpg://user:pass@localhost/steward
         secret_key: test-secret
     """))
     cfg = load_bootstrap(cfg_file)
-    assert cfg["database_url"] == "postgresql+asyncpg://user:pass@localhost/roundtable"
+    assert cfg["database_url"] == "postgresql+asyncpg://user:pass@localhost/steward"
     assert cfg["secret_key"] == "test-secret"
 
 
 def test_env_var_database_url_overrides_yaml(tmp_path, monkeypatch):
     cfg_file = tmp_path / "config.yaml"
     cfg_file.write_text("database:\n  url: original\nsecret_key: s\n")
-    monkeypatch.setenv("FABLEDSCRYER_DATABASE_URL", "overridden")
+    monkeypatch.setenv("STEWARD_DATABASE_URL", "overridden")
     cfg = load_bootstrap(cfg_file)
     assert cfg["database_url"] == "overridden"
 
@@ -27,7 +27,7 @@ def test_env_var_database_url_overrides_yaml(tmp_path, monkeypatch):
 def test_env_var_secret_key_overrides_yaml(tmp_path, monkeypatch):
     cfg_file = tmp_path / "config.yaml"
     cfg_file.write_text("database:\n  url: x\nsecret_key: from-yaml\n")
-    monkeypatch.setenv("FABLEDSCRYER_SECRET_KEY", "from-env")
+    monkeypatch.setenv("STEWARD_SECRET_KEY", "from-env")
     cfg = load_bootstrap(cfg_file)
     assert cfg["secret_key"] == "from-env"
 

tests/test_models.py

@@ -1,5 +1,5 @@
 import pytest
-from roundtable.models.users import User, UserRole
+from steward.models.users import User, UserRole
 
 
 def test_user_model_fields():