rebrand: Switchboard Core → Armature

- Rename Go module switchboard-core → armature (155+ files)
- Rename Docker image → gobha/armature
- Rename K8s resources, secrets, deployments
- Rename Prometheus metrics switchboard_* → armature_*
- Rename env vars SWITCHBOARD_ADMIN_* → ARMATURE_ADMIN_*
- Rename DB names switchboard_core* → armature*
- Update all frontend branding, notification templates, docs
- Update CI scripts, e2e tests, Keycloak realm, nginx conf
- Rename scripts/switchboard-ca.sh → scripts/armature-ca.sh
- Rename k8s/switchboard.yaml → k8s/armature.yaml
- Rename chart alerting/dashboard files
- Fix: DockerHub push uses env: binding for secret injection
- Helm chart updated (name, labels, template functions, dashboard, alerting)
- Replace favicon/icon assets with Armature brand

No functional changes. Pure mechanical rename + CI fix.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/.env.example

@@ -1,4 +1,4 @@
-# Switchboard Core - Server Environment Variables
+# Armature - Server Environment Variables
 # Copy this file to .env and fill in the values
 
 # ── Server ───────────────────────────────────
@@ -9,9 +9,9 @@ BASE_PATH=                     # e.g. /chat for path-based routing
 # ── Database (PostgreSQL) ────────────────────
 DB_HOST=localhost
 DB_PORT=5432
-DB_USER=switchboard_core
+DB_USER=armature
 DB_PASSWORD=your-secure-password-here
-DB_NAME=switchboard_core
+DB_NAME=armature
 DB_SSL_MODE=disable
 DB_MAX_CONNS=25
 
@@ -20,19 +20,19 @@ JWT_SECRET=your-super-secret-jwt-key-change-in-production
 # JWT durations (hardcoded in handlers/auth.go — not configurable via env):
 #   Access token:  15 minutes
 #   Refresh token: 7 days
-JWT_ISSUER=switchboard-core
+JWT_ISSUER=armature
 
 # ── Bootstrap Admin ──────────────────────────
 # Creates or updates admin account on every startup.
 # Set via K8s secret or env. Leave blank to skip.
-SWITCHBOARD_ADMIN_USERNAME=
-SWITCHBOARD_ADMIN_PASSWORD=
+ARMATURE_ADMIN_USERNAME=
+ARMATURE_ADMIN_PASSWORD=
 
 # ── Seed Users (dev/test only) ──────────────
 # Pre-create users on startup. Ignored in production.
 # Format: user:pass:role,user2:pass2:role2 (role = admin|user, default: user)
 # Idempotent: existing usernames are skipped.
-# K8s: create secret "switchboard-seed-users" with key "users"
+# K8s: create secret "armature-seed-users" with key "users"
 SEED_USERS=
 
 # ── CORS ─────────────────────────────────────
@@ -57,7 +57,7 @@ STORAGE_PATH=/data/storage
 # S3 settings (only when STORAGE_BACKEND=s3)
 # Works with MinIO, Ceph RGW, AWS S3.
 # S3_ENDPOINT=http://minio:9000
-# S3_BUCKET=switchboard-storage
+# S3_BUCKET=armature-storage
 # S3_ACCESS_KEY=
 # S3_SECRET_KEY=
 # S3_REGION=us-east-1