refactor!: rename project to bot-bottle

Assisted-by: Codex

docs/prds/0008-git-gate.md

@@ -26,7 +26,7 @@ entry and pushes straight at gitea/github with ssh-gate doing dumb
 L4 forwarding. There is no boundary between "the agent thinks this
 commit is fine" and "the secret hits an external remote." If a
 compromised or careless agent stages a `.env`, slips a token into
-a fixture, or commits the `CLAUDE_BOTTLE_OAUTH_TOKEN` itself, `git
+a fixture, or commits the `BOT_BOTTLE_OAUTH_TOKEN` itself, `git
 push` ships it.
 
 Host-side pre-commit / pre-push hooks are the usual defense, but
@@ -131,16 +131,16 @@ for a declared upstream:
 
 Mirror the existing sidecar layout:
 
-- **`claude_bottle/git_gate.py`** (new): abstract `GitGate` +
+- **`bot_bottle/git_gate.py`** (new): abstract `GitGate` +
   `GitGatePlan` dataclass. `prepare` is host-side / side-effect-
   free on docker; renders the per-upstream config and stages the
   push credentials under `stage_dir`.
-- **`claude_bottle/backend/docker/git_gate.py`** (new):
+- **`bot_bottle/backend/docker/git_gate.py`** (new):
   `DockerGitGate` concrete subclass. `start` does `docker create`
   on the internal network, copies in the bare-repo skeleton, the
   hook script, and per-upstream credentials, then `docker start`.
   `stop` is idempotent `docker rm -f`. Container name:
-  `claude-bottle-git-gate-<slug>`.
+  `bot-bottle-git-gate-<slug>`.
 
 Gate image: `git-daemon` + `openssh-client` over a
 `zricethezav/gitleaks` base (alpine + gitleaks), pinned by digest.
@@ -173,21 +173,21 @@ operation.
 
 ### Existing code touched
 
-- **`claude_bottle/manifest.py`**: parse and validate the new
+- **`bot_bottle/manifest.py`**: parse and validate the new
   `bottle.git` block; reject `bottle.ssh` entries whose upstream
   is also claimed by a `bottle.git` upstream (one path per
   remote, no shadow route).
-- **`claude_bottle/backend/docker/provision/git.py`** (new) or an
+- **`bot_bottle/backend/docker/provision/git.py`** (new) or an
   extension of the ssh provisioner: render the `insteadOf` config
   and any extra `~/.gitconfig` plumbing.
-- **`claude_bottle/backend/docker/backend.py`**: instantiate
+- **`bot_bottle/backend/docker/backend.py`**: instantiate
   `DockerGitGate` alongside `DockerPipelockProxy` and
   `DockerSSHGate`; thread its `prepare` / `start` / `stop`
   through `resolve_plan` / `launch`.
-- **`claude_bottle/backend/docker/launch.py`**: add gate start /
+- **`bot_bottle/backend/docker/launch.py`**: add gate start /
   stop to the `ExitStack` so the gate is up before any
   provisioner that writes the agent's `~/.gitconfig`.
-- **`claude_bottle/backend/docker/bottle_plan.py`**: new
+- **`bot_bottle/backend/docker/bottle_plan.py`**: new
   `GitGatePlan` field on `DockerBottlePlan`; preflight rendering
   surfaces the gate sidecar (name, per-upstream local paths,
   upstream real URLs, which credential is in use).
@@ -249,6 +249,6 @@ exposes it as, and the credential the gate uses to push upstream
 - PRD 0007: SSH egress gate — the L4 SSH forwarder this PRD
   sits alongside; explicitly *not* the place to add
   git-protocol awareness.
-- `claude_bottle/ssh_gate.py` / `claude_bottle/pipelock.py` —
+- `bot_bottle/ssh_gate.py` / `bot_bottle/pipelock.py` —
   existing sidecar abstractions to mirror.
 - gitleaks: <https://github.com/gitleaks/gitleaks>