the name: Bikoret — code, contracts, images

Headers X-Bikoret-Key / -Rebuke / -Verdict / -Bedikah; the `bikoret`
object and the "— bikoret …" fringe on a gate reply; environment
variables BIKORET_*; the image user and paths (/home/bikoret,
/tmp/bikoret, /var/lib/bikoret/manna, /etc/bikoret/secrets,
/opt/bikoret/spec); the tmp-bikoret pod volume; local databases
bikoret_dev/_test. Kubernetes resource names, the shorashim_app role and
the domain are unchanged (Tamid §1.1, "the names that still carry the
old word"). Doorpost c963c4fe…. Elixir 604/0, L3 10/0, korban 295,
Prolog bedikah 44/44. Gitea repo renamed heaviness510/bikoret (old URL
redirects).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

vav_pipeline/config/runtime.exs

@@ -26,13 +26,13 @@ if config_env() == :prod do
     l1_mount_point: System.get_env("L1_MOUNT_POINT") || "/mnt/torah",
     mesorah_mount_point: System.get_env("MESORAH_MOUNT_POINT") || "/mnt/mesorah",
     manna_provision_file:
-      System.get_env("MANNA_PROVISION_FILE") || "/var/lib/shorashim/manna/today.json",
+      System.get_env("MANNA_PROVISION_FILE") || "/var/lib/bikoret/manna/today.json",
     talmudic_socket_path:
-      System.get_env("TALMUDIC_SOCKET_PATH") || "/tmp/shorashim/talmudic.sock",
+      System.get_env("TALMUDIC_SOCKET_PATH") || "/tmp/bikoret/talmudic.sock",
     korban_socket_path:
-      System.get_env("KORBAN_SOCKET_PATH") || "/tmp/shorashim/korban.sock",
+      System.get_env("KORBAN_SOCKET_PATH") || "/tmp/bikoret/korban.sock",
     # The keys themselves are in the file (a mounted Secret), not in env.
-    api_keys_file: System.get_env("API_KEYS_FILE") || "/etc/shorashim/secrets/api_keys",
+    api_keys_file: System.get_env("API_KEYS_FILE") || "/etc/bikoret/secrets/api_keys",
     # The ingress controller's network: only from there is X-Real-IP the
     # caller's address (BigdeiKodesh.Mishmar.peer/1). Comma-separated CIDRs.
     trusted_proxies: