rebrand: Switchboard Core → Armature

- Rename Go module switchboard-core → armature (155+ files)
- Rename Docker image → gobha/armature
- Rename K8s resources, secrets, deployments
- Rename Prometheus metrics switchboard_* → armature_*
- Rename env vars SWITCHBOARD_ADMIN_* → ARMATURE_ADMIN_*
- Rename DB names switchboard_core* → armature*
- Update all frontend branding, notification templates, docs
- Update CI scripts, e2e tests, Keycloak realm, nginx conf
- Rename scripts/switchboard-ca.sh → scripts/armature-ca.sh
- Rename k8s/switchboard.yaml → k8s/armature.yaml
- Rename chart alerting/dashboard files
- Fix: DockerHub push uses env: binding for secret injection
- Helm chart updated (name, labels, template functions, dashboard, alerting)
- Replace favicon/icon assets with Armature brand

No functional changes. Pure mechanical rename + CI fix.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/handlers/auth.go

@@ -17,11 +17,11 @@ import (
 	"github.com/google/uuid"
 	"golang.org/x/crypto/bcrypt"
 
-	"switchboard-core/auth"
-	"switchboard-core/config"
-	"switchboard-core/crypto"
-	"switchboard-core/models"
-	"switchboard-core/store"
+	"armature/auth"
+	"armature/config"
+	"armature/crypto"
+	"armature/models"
+	"armature/store"
 )
 
 // Claims represents the JWT payload.
@@ -517,7 +517,7 @@ func BootstrapAdmin(cfg *config.Config, s store.Stores, uekCache ...*crypto.UEKC
 
 	email := cfg.AdminEmail
 	if email == "" {
-		email = cfg.AdminUsername + "@switchboard.local"
+		email = cfg.AdminUsername + "@armature.local"
 	}
 
 	handle := auth.UniqueHandle(ctx, s.Users, models.HandleFromName(cfg.AdminUsername))
@@ -612,7 +612,7 @@ func SeedUsers(cfg *config.Config, s store.Stores, uekCache ...*crypto.UEKCache)
 		handle := auth.UniqueHandle(ctx, s.Users, models.HandleFromName(username))
 		user := &models.User{
 			Username:     username,
-			Email:        username + "@switchboard.local",
+			Email:        username + "@armature.local",
 			PasswordHash: string(hash),
 			IsActive:     true,
 			AuthSource:   "builtin",