the name: Bikoret — code, contracts, images

Headers X-Bikoret-Key / -Rebuke / -Verdict / -Bedikah; the `bikoret`
object and the "— bikoret …" fringe on a gate reply; environment
variables BIKORET_*; the image user and paths (/home/bikoret,
/tmp/bikoret, /var/lib/bikoret/manna, /etc/bikoret/secrets,
/opt/bikoret/spec); the tmp-bikoret pod volume; local databases
bikoret_dev/_test. Kubernetes resource names, the shorashim_app role and
the domain are unchanged (Tamid §1.1, "the names that still carry the
old word"). Doorpost c963c4fe…. Elixir 604/0, L3 10/0, korban 295,
Prolog bedikah 44/44. Gitea repo renamed heaviness510/bikoret (old URL
redirects).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

deploy/k8s/configmap.yaml

@@ -1,4 +1,4 @@
-# Shorashim ConfigMap — non-secret configuration
+# Bikoret ConfigMap — non-secret configuration
 # Construction spec §4.4: Tuning constants
 apiVersion: v1
 kind: ConfigMap
@@ -10,20 +10,20 @@ data:
   L1_MOUNT_POINT: "/mnt/torah"
 
   # Manna provision file location
-  MANNA_PROVISION_FILE: "/var/lib/shorashim/manna/today.json"
+  MANNA_PROVISION_FILE: "/var/lib/bikoret/manna/today.json"
 
   # Talmudic Engine socket
-  TALMUDIC_SOCKET_PATH: "/tmp/shorashim/talmudic.sock"
+  TALMUDIC_SOCKET_PATH: "/tmp/bikoret/talmudic.sock"
 
   # Korban Processor socket — the bedikah (Construction §3.9). Opened by
   # the korban-processor container, read by vav-pipeline, both over the
-  # shared tmp-shorashim volume. Pod-internal; never on the network.
-  KORBAN_SOCKET_PATH: "/tmp/shorashim/korban.sock"
+  # shared tmp-bikoret volume. Pod-internal; never on the network.
+  KORBAN_SOCKET_PATH: "/tmp/bikoret/korban.sock"
 
   # Courtyard / chatzer keys — a FILE (Construction §4.6), projected from
   # the shorashim-api-keys Secret (secrets.yaml). The path is config; the
   # keys never are.
-  API_KEYS_FILE: "/etc/shorashim/secrets/api_keys"
+  API_KEYS_FILE: "/etc/bikoret/secrets/api_keys"
 
   # The pod network. The ingress controller lives in it; only from here
   # is X-Real-IP believed as the caller's address (the pe'ah's per-IP