rebrand: Switchboard Core → Armature

- Rename Go module switchboard-core → armature (155+ files)
- Rename Docker image → gobha/armature
- Rename K8s resources, secrets, deployments
- Rename Prometheus metrics switchboard_* → armature_*
- Rename env vars SWITCHBOARD_ADMIN_* → ARMATURE_ADMIN_*
- Rename DB names switchboard_core* → armature*
- Update all frontend branding, notification templates, docs
- Update CI scripts, e2e tests, Keycloak realm, nginx conf
- Rename scripts/switchboard-ca.sh → scripts/armature-ca.sh
- Rename k8s/switchboard.yaml → k8s/armature.yaml
- Rename chart alerting/dashboard files
- Fix: DockerHub push uses env: binding for secret injection
- Helm chart updated (name, labels, template functions, dashboard, alerting)
- Replace favicon/icon assets with Armature brand

No functional changes. Pure mechanical rename + CI fix.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/config/config.go

@@ -44,7 +44,7 @@ type Config struct {
 	S3Region         string // AWS region (default "us-east-1")
 	S3AccessKey      string // access key ID
 	S3SecretKey      string // secret access key
-	S3Prefix         string // optional key prefix within bucket (e.g. "switchboard/")
+	S3Prefix         string // optional key prefix within bucket (e.g. "armature/")
 	S3ForcePathStyle bool   // use path-style URLs (required for MinIO, most self-hosted)
 
 	// Structured logging
@@ -85,11 +85,11 @@ type Config struct {
 	BundledPackages     string
 
 	// OIDC
-	OIDCIssuerURL    string // e.g. "https://keycloak.corp/realms/switchboard"
+	OIDCIssuerURL    string // e.g. "https://keycloak.corp/realms/armature"
 	OIDCExternalIssuerURL string  // OIDC_EXTERNAL_ISSUER_URL
 	OIDCClientID     string
 	OIDCClientSecret string
-	OIDCRedirectURL  string // e.g. "https://switchboard.corp/api/v1/auth/oidc/callback"
+	OIDCRedirectURL  string // e.g. "https://armature.corp/api/v1/auth/oidc/callback"
 	OIDCAutoActivate bool   // auto-activate new users (default true)
 	OIDCDefaultTeam  string // team ID for auto-provisioned users (optional)
 	OIDCRolesClaim   string // JWT claim for role mapping (default "realm_access.roles")
@@ -127,9 +127,9 @@ func Load() *Config {
 		JWTSecret:     getEnv("JWT_SECRET", "dev-secret-change-me"),
 		Environment:   getEnv("ENVIRONMENT", "development"),
 		BasePath:      sanitizeBasePath(getEnv("BASE_PATH", "")),
-		AdminUsername: getEnv("SWITCHBOARD_ADMIN_USERNAME", ""),
-		AdminPassword: getEnv("SWITCHBOARD_ADMIN_PASSWORD", ""),
-		AdminEmail:    getEnv("SWITCHBOARD_ADMIN_EMAIL", ""),
+		AdminUsername: getEnv("ARMATURE_ADMIN_USERNAME", ""),
+		AdminPassword: getEnv("ARMATURE_ADMIN_PASSWORD", ""),
+		AdminEmail:    getEnv("ARMATURE_ADMIN_EMAIL", ""),
 		SeedUsers:     getEnv("SEED_USERS", ""),
 		EncryptionKey: getEnv("ENCRYPTION_KEY", ""),
 
@@ -207,7 +207,7 @@ func resolveDatabaseURL() string {
 	port := getEnv("POSTGRES_PORT", "5432")
 	user := getEnv("POSTGRES_USER", "")
 	pass := getEnv("POSTGRES_PASSWORD", "")
-	db := getEnv("POSTGRES_DB", "switchboard_core")
+	db := getEnv("POSTGRES_DB", "armature")
 	ssl := getEnv("POSTGRES_SSLMODE", "disable")
 	return fmt.Sprintf("postgres://%s:%s@%s:%s/%s?sslmode=%s", user, pass, host, port, db, ssl)
 }