rebrand: Switchboard Core → Armature

- Rename Go module switchboard-core → armature (155+ files)
- Rename Docker image → gobha/armature
- Rename K8s resources, secrets, deployments
- Rename Prometheus metrics switchboard_* → armature_*
- Rename env vars SWITCHBOARD_ADMIN_* → ARMATURE_ADMIN_*
- Rename DB names switchboard_core* → armature*
- Update all frontend branding, notification templates, docs
- Update CI scripts, e2e tests, Keycloak realm, nginx conf
- Rename scripts/switchboard-ca.sh → scripts/armature-ca.sh
- Rename k8s/switchboard.yaml → k8s/armature.yaml
- Rename chart alerting/dashboard files
- Fix: DockerHub push uses env: binding for secret injection
- Helm chart updated (name, labels, template functions, dashboard, alerting)
- Replace favicon/icon assets with Armature brand

No functional changes. Pure mechanical rename + CI fix.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

k8s/ingress.yaml

@@ -1,11 +1,11 @@
 # k8s/ingress.yaml
 # ============================================
-# Switchboard Core - Ingress
+# Armature Core - Ingress
 # ============================================
 # Path-based routing on a single domain:
-#   switchboard.DOMAIN/         → production
-#   switchboard.DOMAIN/test/    → test (main branch)
-#   switchboard.DOMAIN/dev/     → dev  (PR branches)
+#   armature.DOMAIN/         → production
+#   armature.DOMAIN/test/    → test (main branch)
+#   armature.DOMAIN/dev/     → dev  (PR branches)
 #
 # Each environment deploys its own Ingress resource.
 # Traefik merges rules for the same host automatically.
@@ -18,29 +18,29 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: switchboard${DEPLOY_SUFFIX}
+  name: armature${DEPLOY_SUFFIX}
   namespace: ${NAMESPACE}
   annotations:
     cert-manager.io/cluster-issuer: "${CERT_ISSUER}"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
   labels:
-    app: switchboard
+    app: armature
     env: ${ENVIRONMENT}
 spec:
   ingressClassName: "traefik"
   tls:
   - hosts:
     - ${DEPLOY_HOST}
-    secretName: switchboard-tls
+    secretName: armature-tls
   rules:
   - host: "${DEPLOY_HOST}"
     http:
       paths:
-      # All traffic → switchboard (unified image)
+      # All traffic → armature (unified image)
       - path: ${BASE_PATH}/
         pathType: Prefix
         backend:
           service:
-            name: switchboard${DEPLOY_SUFFIX}
+            name: armature${DEPLOY_SUFFIX}
             port:
               number: 80