rename: the server is Inkwell — package, env vars, image, compose, export marker

Step 2 of milestone 481. The operator chose a full rename (Scribe note 5071), so
this goes past the display strings into the identities:

- src/thoughtsync → src/inkwell; every import, the Dockerfile and both compose
  commands, alembic env, pyproject
- THOUGHTSYNC_* → INKWELL_* (database URL, secret key, log level, tag/port/bind)
- container data dir /var/thoughtsync → /var/inkwell
- image git.fabledsword.com/bvandeusen/inkwell; Postgres user/db default inkwell;
  CI's integration service follows
- the files the image serves are inkwell.*. fetch-clients.sh still fetches the
  thoughtsync-named release assets, because the lanes that publish them are
  renamed in steps 3 and 4
- exports are written with app "inkwell"

Two deliberate exceptions, both because data rides on them:

- compose volumes are now named explicitly and overridable (INKWELL_DB_VOLUME,
  INKWELL_DATA_VOLUME), so a deployment installed as ThoughtSync points at the
  volumes and DB identity it already has. .env.example says exactly what to set
- import still accepts app "thoughtsync", because exports written before the
  rename are backups. Tested both ways

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_client_dist.py

@@ -3,9 +3,9 @@ from pathlib import Path
 
 import pytest
 
-from thoughtsync import client_dist
-from thoughtsync.app import create_app
-from thoughtsync.client_dist import (
+from inkwell import client_dist
+from inkwell.app import create_app
+from inkwell.client_dist import (
     APK_NAME,
     BY_ID,
     MANIFEST_NAME,
@@ -15,7 +15,7 @@ from thoughtsync.client_dist import (
     release,
     releases,
 )
-from thoughtsync.config import Config
+from inkwell.config import Config
 
 # DB-free, like the rest of this suite — the test lane runs no Postgres. That is
 # why the advertisement is asserted through `advertisement()` rather than through
@@ -61,7 +61,7 @@ def coded(platform_id: str, value: int):
 def _empty_baked_client(tmp_path, monkeypatch):
     """Point the baked-in copy at an empty directory.
 
-    In a source checkout `src/thoughtsync/client/` does not exist, so these tests
+    In a source checkout `src/inkwell/client/` does not exist, so these tests
     would pass anyway — but only by accident of where they are run. A built image
     has real clients there, and a test that silently depends on which tree it is in
     is one that will eventually lie.
@@ -118,13 +118,17 @@ def test_every_platform_has_its_own_filenames():
     assert not set(artifacts) & set(sidecars)
 
 
-def test_the_android_names_are_the_ones_already_published():
-    """Pinned because renaming them is a tidy-up that strands every installed phone.
+def test_the_android_names_are_the_ones_the_image_build_writes():
+    """Pinned against `packaging/fetch-clients.sh`, which writes the APK and its
+    sidecar under these names when it bakes them into the image. The two are a pair
+    with nothing checking them against each other, so a rename on one side reads as
+    "no Android client" on the other rather than as an error.
 
-    The Android lane publishes these exact names and CI bakes them in under them.
+    Phones never ask for these names; they poll `/api/client/android`. The names
+    changed once, with the rename to Inkwell (Scribe note 5071).
     """
-    assert APK_NAME == "thoughtsync.apk"
-    assert MANIFEST_NAME == "thoughtsync-android.json"
+    assert APK_NAME == "inkwell.apk"
+    assert MANIFEST_NAME == "inkwell-android.json"
 
 
 # --- absence is an ordinary answer -------------------------------------------