rebrand: Switchboard Core → Armature

- Rename Go module switchboard-core → armature (155+ files)
- Rename Docker image → gobha/armature
- Rename K8s resources, secrets, deployments
- Rename Prometheus metrics switchboard_* → armature_*
- Rename env vars SWITCHBOARD_ADMIN_* → ARMATURE_ADMIN_*
- Rename DB names switchboard_core* → armature*
- Update all frontend branding, notification templates, docs
- Update CI scripts, e2e tests, Keycloak realm, nginx conf
- Rename scripts/switchboard-ca.sh → scripts/armature-ca.sh
- Rename k8s/switchboard.yaml → k8s/armature.yaml
- Rename chart alerting/dashboard files
- Fix: DockerHub push uses env: binding for secret injection
- Helm chart updated (name, labels, template functions, dashboard, alerting)
- Replace favicon/icon assets with Armature brand

No functional changes. Pure mechanical rename + CI fix.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ci/e2e-cluster-test.sh

@@ -103,7 +103,7 @@ done
 
 # ── Test 4: Stop one replica → stale sweep ────
 echo "=== Test 4: Stop node-3, wait for sweep ==="
-docker compose -f docker-compose-e2e.yml stop switchboard-3
+docker compose -f docker-compose-e2e.yml stop armature-3
 
 echo "  waiting ${STALE_WAIT}s for stale sweep..."
 sleep "$STALE_WAIT"
@@ -118,7 +118,7 @@ fi
 
 # ── Test 5: Restart replica → re-registers ────
 echo "=== Test 5: Restart node-3 ==="
-docker compose -f docker-compose-e2e.yml start switchboard-3
+docker compose -f docker-compose-e2e.yml start armature-3
 
 # Wait for startup + at least one heartbeat
 for i in $(seq 1 30); do

ci/e2e-nginx.conf

@@ -3,10 +3,10 @@ events {
 }
 
 http {
-  upstream switchboard {
-    server switchboard-1:80;
-    server switchboard-2:80;
-    server switchboard-3:80;
+  upstream armature {
+    server armature-1:80;
+    server armature-2:80;
+    server armature-3:80;
   }
 
   # WebSocket upgrade map
@@ -19,7 +19,7 @@ http {
     listen 80;
 
     location / {
-      proxy_pass http://switchboard;
+      proxy_pass http://armature;
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -28,7 +28,7 @@ http {
 
     # WebSocket endpoint
     location /ws {
-      proxy_pass http://switchboard;
+      proxy_pass http://armature;
       proxy_http_version 1.1;
       proxy_set_header Upgrade $http_upgrade;
       proxy_set_header Connection $connection_upgrade;

ci/e2e-upgrade-rolling.sh

@@ -83,11 +83,11 @@ authed() {
 echo -e "\n${YELLOW}═══ Phase 1: Build Images ═══${NC}"
 
 echo "Building 'old' image from HEAD..."
-docker build -t switchboard-core:v-old . -q
+docker build -t armature:v-old . -q
 ok "old image built"
 
 echo "Building 'new' image from working tree..."
-docker build -t switchboard-core:v-new . -q
+docker build -t armature:v-new . -q
 ok "new image built"
 
 # ═══════════════════════════════════════════════
@@ -97,7 +97,7 @@ ok "new image built"
 echo -e "\n${YELLOW}═══ Phase 2: Start Cluster (Old Version) ═══${NC}"
 
 # Override the build with old image
-SWITCHBOARD_IMAGE=switchboard-core:v-old \
+ARMATURE_IMAGE=armature:v-old \
   docker compose -f "$COMPOSE_FILE" up postgres -d
 
 # Wait for postgres
@@ -107,30 +107,30 @@ sleep 3
 docker run -d --name sb-old-1 --network "$(basename "$(pwd)")_default" \
   -e PORT=8080 -e BASE_PATH="" \
   -e DB_DRIVER=postgres \
-  -e "DATABASE_URL=postgres://switchboard:e2e-password@postgres:5432/switchboard_e2e?sslmode=disable" \
+  -e "DATABASE_URL=postgres://armature:e2e-password@postgres:5432/armature_e2e?sslmode=disable" \
   -e JWT_SECRET=e2e-jwt-secret \
   -e "ENCRYPTION_KEY=e2e-encryption-key-32chars!!!!!" \
-  -e SWITCHBOARD_ADMIN_USERNAME=admin \
-  -e SWITCHBOARD_ADMIN_PASSWORD=admin \
+  -e ARMATURE_ADMIN_USERNAME=admin \
+  -e ARMATURE_ADMIN_PASSWORD=admin \
   -e STORAGE_BACKEND=pvc -e STORAGE_PATH=/data/storage \
   -e "CORS_ALLOWED_ORIGINS=*" -e EXT_ALLOW_PRIVATE_IPS=true \
   -e LOG_FORMAT=text -e LOG_LEVEL=info \
   -e "SEED_USERS=alice:password123:user,bob:password456:user" \
-  -p 8081:80 switchboard-core:v-old 2>/dev/null || true
+  -p 8081:80 armature:v-old 2>/dev/null || true
 
 docker run -d --name sb-old-2 --network "$(basename "$(pwd)")_default" \
   -e PORT=8080 -e BASE_PATH="" \
   -e DB_DRIVER=postgres \
-  -e "DATABASE_URL=postgres://switchboard:e2e-password@postgres:5432/switchboard_e2e?sslmode=disable" \
+  -e "DATABASE_URL=postgres://armature:e2e-password@postgres:5432/armature_e2e?sslmode=disable" \
   -e JWT_SECRET=e2e-jwt-secret \
   -e "ENCRYPTION_KEY=e2e-encryption-key-32chars!!!!!" \
-  -e SWITCHBOARD_ADMIN_USERNAME=admin \
-  -e SWITCHBOARD_ADMIN_PASSWORD=admin \
+  -e ARMATURE_ADMIN_USERNAME=admin \
+  -e ARMATURE_ADMIN_PASSWORD=admin \
   -e STORAGE_BACKEND=pvc -e STORAGE_PATH=/data/storage \
   -e "CORS_ALLOWED_ORIGINS=*" -e EXT_ALLOW_PRIVATE_IPS=true \
   -e LOG_FORMAT=text -e LOG_LEVEL=info \
   -e "SEED_USERS=alice:password123:user,bob:password456:user" \
-  -p 8082:80 switchboard-core:v-old 2>/dev/null || true
+  -p 8082:80 armature:v-old 2>/dev/null || true
 
 # Start nginx LB
 docker compose -f "$COMPOSE_FILE" up lb -d
@@ -189,16 +189,16 @@ echo "Starting new replica-1..."
 docker run -d --name sb-new-1 --network "$(basename "$(pwd)")_default" \
   -e PORT=8080 -e BASE_PATH="" \
   -e DB_DRIVER=postgres \
-  -e "DATABASE_URL=postgres://switchboard:e2e-password@postgres:5432/switchboard_e2e?sslmode=disable" \
+  -e "DATABASE_URL=postgres://armature:e2e-password@postgres:5432/armature_e2e?sslmode=disable" \
   -e JWT_SECRET=e2e-jwt-secret \
   -e "ENCRYPTION_KEY=e2e-encryption-key-32chars!!!!!" \
-  -e SWITCHBOARD_ADMIN_USERNAME=admin \
-  -e SWITCHBOARD_ADMIN_PASSWORD=admin \
+  -e ARMATURE_ADMIN_USERNAME=admin \
+  -e ARMATURE_ADMIN_PASSWORD=admin \
   -e STORAGE_BACKEND=pvc -e STORAGE_PATH=/data/storage \
   -e "CORS_ALLOWED_ORIGINS=*" -e EXT_ALLOW_PRIVATE_IPS=true \
   -e LOG_FORMAT=text -e LOG_LEVEL=info \
   -e "SEED_USERS=alice:password123:user,bob:password456:user" \
-  -p 8081:80 switchboard-core:v-new
+  -p 8081:80 armature:v-new
 
 wait_for_health "$R1" "new replica-1"
 
@@ -246,16 +246,16 @@ echo "Starting new replica-2..."
 docker run -d --name sb-new-2 --network "$(basename "$(pwd)")_default" \
   -e PORT=8080 -e BASE_PATH="" \
   -e DB_DRIVER=postgres \
-  -e "DATABASE_URL=postgres://switchboard:e2e-password@postgres:5432/switchboard_e2e?sslmode=disable" \
+  -e "DATABASE_URL=postgres://armature:e2e-password@postgres:5432/armature_e2e?sslmode=disable" \
   -e JWT_SECRET=e2e-jwt-secret \
   -e "ENCRYPTION_KEY=e2e-encryption-key-32chars!!!!!" \
-  -e SWITCHBOARD_ADMIN_USERNAME=admin \
-  -e SWITCHBOARD_ADMIN_PASSWORD=admin \
+  -e ARMATURE_ADMIN_USERNAME=admin \
+  -e ARMATURE_ADMIN_PASSWORD=admin \
   -e STORAGE_BACKEND=pvc -e STORAGE_PATH=/data/storage \
   -e "CORS_ALLOWED_ORIGINS=*" -e EXT_ALLOW_PRIVATE_IPS=true \
   -e LOG_FORMAT=text -e LOG_LEVEL=info \
   -e "SEED_USERS=alice:password123:user,bob:password456:user" \
-  -p 8082:80 switchboard-core:v-new
+  -p 8082:80 armature:v-new
 
 wait_for_health "$R2" "new replica-2"
 

ci/e2e-upgrade-test.sh

@@ -82,13 +82,13 @@ echo -e "\n${YELLOW}═══ Phase 1: Build Images ═══${NC}"
 # Build "old" image from last commit (before current changes)
 echo "Building 'old' image from HEAD commit..."
 git stash -q 2>/dev/null || true
-docker build --no-cache -t switchboard-core:v-old . -q
+docker build --no-cache -t armature:v-old . -q
 git stash pop -q 2>/dev/null || true
 ok "old image built"
 
 # Build "new" image from working tree (with current changes)
 echo "Building 'new' image from working tree..."
-docker build --no-cache -t core-switchboard-new . -q
+docker build --no-cache -t armature:v-new . -q
 ok "new image built"
 
 # ═══════════════════════════════════════════════
@@ -97,7 +97,7 @@ ok "new image built"
 
 echo -e "\n${YELLOW}═══ Phase 2: Seed Data on Old Version ═══${NC}"
 
-docker compose -f "$COMPOSE_FILE" up postgres switchboard-old -d
+docker compose -f "$COMPOSE_FILE" up postgres armature-old -d
 wait_for_health "$HOST"
 
 # Auth
@@ -179,17 +179,17 @@ ok "recorded $PRE_PKG_COUNT installed packages"
 echo -e "\n${YELLOW}═══ Phase 3: Upgrade ═══${NC}"
 
 echo "Stopping old version..."
-docker compose -f "$COMPOSE_FILE" stop switchboard-old
+docker compose -f "$COMPOSE_FILE" stop armature-old
 ok "old version stopped"
 
 echo "Starting new version..."
-docker compose -f "$COMPOSE_FILE" up switchboard-new -d
+docker compose -f "$COMPOSE_FILE" up armature-new -d
 wait_for_health "$HOST"
 ok "new version started"
 
 # Check for migration errors in logs
 echo -e "\n${YELLOW}Checking startup logs...${NC}"
-LOGS=$(docker compose -f "$COMPOSE_FILE" logs switchboard-new 2>&1 || echo "")
+LOGS=$(docker compose -f "$COMPOSE_FILE" logs armature-new 2>&1 || echo "")
 if echo "$LOGS" | grep -qi "migration.*fail\|schema.*error\|panic\|fatal"; then
   fail "migration errors found in logs"
   echo "$LOGS" | grep -i "migration\|schema\|panic\|fatal" | head -5

ci/keycloak-realm.json

@@ -1,5 +1,5 @@
 {
-  "realm": "switchboard",
+  "realm": "armature",
   "enabled": true,
   "registrationAllowed": false,
   "loginWithEmailAllowed": true,
@@ -9,11 +9,11 @@
     "realm": [
       {
         "name": "sb-admin",
-        "description": "Switchboard admin role"
+        "description": "Armature admin role"
       },
       {
         "name": "sb-user",
-        "description": "Switchboard regular user role"
+        "description": "Armature regular user role"
       }
     ]
   },
@@ -29,11 +29,11 @@
   ],
   "clients": [
     {
-      "clientId": "switchboard",
-      "name": "Switchboard Core",
+      "clientId": "armature",
+      "name": "Armature",
       "enabled": true,
       "publicClient": false,
-      "secret": "switchboard-secret",
+      "secret": "armature-secret",
       "redirectUris": [
         "http://localhost:3000/*",
         "http://localhost:8080/*"
@@ -69,7 +69,7 @@
   "users": [
     {
       "username": "alice",
-      "email": "alice@switchboard.test",
+      "email": "alice@armature.test",
       "firstName": "Alice",
       "lastName": "Engineer",
       "enabled": true,
@@ -83,7 +83,7 @@
       ],
       "realmRoles": [
         "sb-user",
-        "default-roles-switchboard"
+        "default-roles-armature"
       ],
       "groups": [
         "/engineering"
@@ -91,7 +91,7 @@
     },
     {
       "username": "bob",
-      "email": "bob@switchboard.test",
+      "email": "bob@armature.test",
       "firstName": "Bob",
       "lastName": "Lead",
       "enabled": true,
@@ -106,7 +106,7 @@
       "realmRoles": [
         "sb-admin",
         "sb-user",
-        "default-roles-switchboard"
+        "default-roles-armature"
       ],
       "groups": [
         "/engineering",