the name: Bikoret — code, contracts, images

Headers X-Bikoret-Key / -Rebuke / -Verdict / -Bedikah; the `bikoret`
object and the "— bikoret …" fringe on a gate reply; environment
variables BIKORET_*; the image user and paths (/home/bikoret,
/tmp/bikoret, /var/lib/bikoret/manna, /etc/bikoret/secrets,
/opt/bikoret/spec); the tmp-bikoret pod volume; local databases
bikoret_dev/_test. Kubernetes resource names, the shorashim_app role and
the domain are unchanged (Tamid §1.1, "the names that still carry the
old word"). Doorpost c963c4fe…. Elixir 604/0, L3 10/0, korban 295,
Prolog bedikah 44/44. Gitea repo renamed heaviness510/bikoret (old URL
redirects).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

deploy/docker/Dockerfile.shoresh_engine

@@ -2,7 +2,7 @@
 # ^ The --platform=linux/amd64 pins below are DELIBERATE (Exoscale SKS
 #   nodes are amd64). BuildKit lints a constant --platform as a smell;
 #   here it is the fix. Silenced so a real warning is not lost in noise.
-# Shorashim Shoresh Engine — Haskell root activation engine
+# Bikoret Shoresh Engine — Haskell root activation engine
 # Construction spec §1.1: GHC 9.6.4, Cabal 3.10
 # Communicates with vav_pipeline via Erlang Port (stdin/stdout)
 #
@@ -58,10 +58,10 @@ ENV LANG=en_US.UTF-8
 ENV LANGUAGE=en_US:en
 ENV LC_ALL=en_US.UTF-8
 
-RUN useradd --create-home --shell /bin/bash shorashim
-USER shorashim
+RUN useradd --create-home --shell /bin/bash bikoret
+USER bikoret
 
-WORKDIR /home/shorashim
+WORKDIR /home/bikoret
 
 COPY --from=build /usr/local/bin/shoresh-engine ./shoresh-engine
 
@@ -74,7 +74,7 @@ COPY --from=build /usr/local/bin/shoresh-engine ./shoresh-engine
 USER root
 COPY --chown=root:root l1/ /mnt/torah/
 RUN chmod -R a-w,a+rX /mnt/torah
-USER shorashim
+USER bikoret
 
 # L1 mount point
 ENV L1_MOUNT_POINT=/mnt/torah