refactor!: rename project to bot-bottle

Assisted-by: Codex

docs/prds/0007-ssh-egress-gate.md

@@ -95,14 +95,14 @@ back to green is the test.
 
 Mirror the pipelock layout:
 
-- **`claude_bottle/ssh_gate.py`** (new): abstract `SSHGate` +
+- **`bot_bottle/ssh_gate.py`** (new): abstract `SSHGate` +
   `SSHGatePlan` dataclass. `prepare` is host-side / side-effect-free
   on docker; renders the forwarder config under `stage_dir`.
-- **`claude_bottle/backend/docker/ssh_gate.py`** (new):
+- **`bot_bottle/backend/docker/ssh_gate.py`** (new):
   `DockerSSHGate` concrete subclass — `start` does `docker create`
   on the internal network, copies the config in, attaches the
   egress network, `docker start`. `stop` is idempotent `docker rm
-  -f`. Container name: `claude-bottle-ssh-gate-<slug>`.
+  -f`. Container name: `bot-bottle-ssh-gate-<slug>`.
 
 Forwarder image: `alpine/socat`, pinned by digest. Must be
 self-sufficient at boot (no apk/apt pulls on first run) because
@@ -126,7 +126,7 @@ rejected at prepare time. One container, N listeners, N upstreams.
 
 ### Existing code touched
 
-- **`claude_bottle/backend/docker/provision/ssh.py`**: drop the
+- **`bot_bottle/backend/docker/provision/ssh.py`**: drop the
   `ProxyCommand socat - PROXY:...` plumbing and the
   `pipelock_proxy_host_port` import. The rendered `~/.ssh/config`
   block per entry becomes:
@@ -140,19 +140,19 @@ rejected at prepare time. One container, N listeners, N upstreams.
   `known_hosts` entries are keyed off `<name>` and the new
   `[<gate-container>]:<listen-port>` form so OpenSSH's strict
   host-key checking still matches.
-- **`claude_bottle/pipelock.py`**: delete
+- **`bot_bottle/pipelock.py`**: delete
   `pipelock_bottle_ssh_hostnames`, `pipelock_bottle_ssh_trusted_domains`,
   `pipelock_bottle_ssh_ip_cidrs`, and the calls into them from
   `pipelock_effective_allowlist` and `pipelock_build_config`. The
   effective allowlist becomes baked-defaults ∪ `bottle.egress.allowlist`.
-- **`claude_bottle/backend/docker/backend.py`**: instantiate
+- **`bot_bottle/backend/docker/backend.py`**: instantiate
   `DockerSSHGate` alongside `DockerPipelockProxy`; thread its
   `prepare` / `start` / `stop` through `resolve_plan` / `launch`.
-- **`claude_bottle/backend/docker/launch.py`**: add gate start /
+- **`bot_bottle/backend/docker/launch.py`**: add gate start /
   stop to the `ExitStack` in the right order — gate must be up
   before `provision_ssh` runs so the agent can dial it on first
   boot.
-- **`claude_bottle/backend/docker/bottle_plan.py`**: new
+- **`bot_bottle/backend/docker/bottle_plan.py`**: new
   `SSHGatePlan` field on `DockerBottlePlan`; preflight rendering
   surfaces the gate sidecar (name, per-entry listen ports,
   upstream `Hostname:Port` targets).
@@ -165,7 +165,7 @@ rejected at prepare time. One container, N listeners, N upstreams.
 ### Data model changes
 
 None. `bottle.ssh` schema is unchanged; one new internal plan
-dataclass (`SSHGatePlan`) under `claude_bottle/ssh_gate.py`.
+dataclass (`SSHGatePlan`) under `bot_bottle/ssh_gate.py`.
 
 ### External dependencies
 
@@ -202,7 +202,7 @@ dataclass (`SSHGatePlan`) under `claude_bottle/ssh_gate.py`.
 - PRD 0006: pipelock native TLS interception — the change that
   surfaced this regression by making pipelock incompatible with
   SSH-over-CONNECT.
-- `claude_bottle/backend/docker/provision/ssh.py` — current SSH
+- `bot_bottle/backend/docker/provision/ssh.py` — current SSH
   provisioning that this PRD rewrites.
-- `claude_bottle/pipelock.py` — current pipelock config builder
+- `bot_bottle/pipelock.py` — current pipelock config builder
   that gains the `bottle.ssh`-derived fields this PRD removes.