rename: the server is Inkwell — package, env vars, image, compose, export marker

Step 2 of milestone 481. The operator chose a full rename (Scribe note 5071), so
this goes past the display strings into the identities:

- src/thoughtsync → src/inkwell; every import, the Dockerfile and both compose
  commands, alembic env, pyproject
- THOUGHTSYNC_* → INKWELL_* (database URL, secret key, log level, tag/port/bind)
- container data dir /var/thoughtsync → /var/inkwell
- image git.fabledsword.com/bvandeusen/inkwell; Postgres user/db default inkwell;
  CI's integration service follows
- the files the image serves are inkwell.*. fetch-clients.sh still fetches the
  thoughtsync-named release assets, because the lanes that publish them are
  renamed in steps 3 and 4
- exports are written with app "inkwell"

Two deliberate exceptions, both because data rides on them:

- compose volumes are now named explicitly and overridable (INKWELL_DB_VOLUME,
  INKWELL_DATA_VOLUME), so a deployment installed as ThoughtSync points at the
  volumes and DB identity it already has. .env.example says exactly what to set
- import still accepts app "thoughtsync", because exports written before the
  rename are backups. Tested both ways

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

packaging/fetch-clients.sh

@@ -37,7 +37,7 @@ case "$channel" in dev|stable) : ;; *)
 esac
 
 SERVER="${GITHUB_SERVER_URL:-https://git.fabledsword.com}"
-REPO="${GITHUB_REPOSITORY:-bvandeusen/thoughtsync}"
+REPO="${GITHUB_REPOSITORY:-bvandeusen/inkwell}"
 # The channel's release tag, not its name — `dev` lives on `dev-rolling`
 # (packaging/channel-tag.sh, Scribe #2184).
 tag="$(sh "$(dirname "$0")/channel-tag.sh" "$channel")"
@@ -88,15 +88,15 @@ echo "==> Collecting the $channel clients"
 # Its sidecar is published whole by the Android lane — an APK keeps its version in
 # a binary AXML manifest, so the values are recorded where they were already known.
 # Copied verbatim rather than rebuilt here.
-if fetch "$BASE/thoughtsync.apk" "$dest/thoughtsync.apk" &&
-   fetch "$BASE/thoughtsync-android.json" "$dest/thoughtsync-android.json"; then
-  echo "    android      $(field "$dest/thoughtsync-android.json" version_name)"
+if fetch "$BASE/thoughtsync.apk" "$dest/inkwell.apk" &&
+   fetch "$BASE/thoughtsync-android.json" "$dest/inkwell-android.json"; then
+  echo "    android      $(field "$dest/inkwell-android.json" version_name)"
 else
   # Both or neither. Half a pair is worse than none: the server would read a
   # sidecar describing an APK that is not there, or an APK it cannot state a
   # version for.
   echo "::warning::No Android client on the $channel channel — this image ships without one."
-  rm -f "$dest/thoughtsync.apk" "$dest/thoughtsync-android.json"
+  rm -f "$dest/inkwell.apk" "$dest/inkwell-android.json"
 fi
 
 # --- desktop -----------------------------------------------------------------
@@ -132,10 +132,10 @@ bake_desktop() {
   #
   # `<platform id>|<published name>|<name on disk>`
   for row in \
-    "linux-deb|ThoughtSync_${key}_amd64.deb|thoughtsync.deb" \
-    "linux-pacman|thoughtsync-${key}-1-x86_64.pkg.tar.zst|thoughtsync.pkg.tar.zst" \
-    "linux-appimage|ThoughtSync_${key}_amd64.AppImage|thoughtsync.AppImage" \
-    "windows|ThoughtSync_${key}_x64-setup.exe|thoughtsync-setup.exe"
+    "linux-deb|ThoughtSync_${key}_amd64.deb|inkwell.deb" \
+    "linux-pacman|thoughtsync-${key}-1-x86_64.pkg.tar.zst|inkwell.pkg.tar.zst" \
+    "linux-appimage|ThoughtSync_${key}_amd64.AppImage|inkwell.AppImage" \
+    "windows|ThoughtSync_${key}_x64-setup.exe|inkwell-setup.exe"
   do
     id="${row%%|*}"; rest="${row#*|}"
     remote="${rest%%|*}"; local_name="${rest#*|}"
@@ -158,7 +158,7 @@ bake_desktop() {
       fi
     fi
 
-    sidecar "$dest/$local_name" "$dest/thoughtsync-$id.json" "$name" "$key"
+    sidecar "$dest/$local_name" "$dest/inkwell-$id.json" "$name" "$key"
     echo "    $id  $(bytes "$dest/$local_name") bytes"
   done
 }