feat(identity): rename user-visible identity to voculinux with one-time legacy import

The fork takes its own name everywhere a user can see it: binaries
(voculinux, voculinux-gui), desktop entry, autostart, tray, D-Bus
namespace (com.voculinux.Voculinux, no alias for the old name),
config/data/cache dirs, single-instance lock, IBus engine identity,
tray icons, resource prefixes, VOCULINUX_* environment names, and the
update-checker user agent. The internal Python module stays vocalinux
and the distribution metadata keeps the upstream URLs as provenance.

On first run a previous Vocalinux install's config.json, custom
dictionary, and portal restore token are copied once into the new
locations (new config always wins, no merge, no write-back); models
re-resolve through the pinned-checksum download path. An offline
naming-sweep test proves no old-name strings remain on user-visible
surfaces outside the allowlist.

Refs #18

.oss-scanner/Dockerfile

@@ -23,7 +23,7 @@ ENV UV_PYTHON_INSTALL_DIR=/opt/uv-python \
     UV_LINK_MODE=copy
 RUN uv sync --locked --extra dev --extra vad
 
-# Make the project venv the default interpreter, so `python`, `pytest` and `vocalinux` work offline.
+# Make the project venv the default interpreter, so `python`, `pytest` and `voculinux` work offline.
 ENV VIRTUAL_ENV=/src/.venv \
     PATH=/src/.venv/bin:$PATH \
     PYTHONPATH=/src \

.oss-scanner/threat_model.md

@@ -1,6 +1,6 @@
 # Threat model
 
-Vocalinux is a desktop voice-dictation app for Linux (X11 and Wayland). It records the
+Voculinux is a desktop voice-dictation app for Linux (X11 and Wayland). It records the
 microphone, runs speech recognition, and types the result into whichever window has focus.
 It runs as the logged-in user, never as root, and has no server of its own. Python
 sources are under `src/vocalinux/`; the tests are under `tests/`.
@@ -26,9 +26,9 @@ has the user's privileges. Input from these places is untrusted:
    (`docs/HTTP_REMOTE.md`), audio goes to a user-configured OpenAI-compatible or
    whisper.cpp HTTP endpoint, and the JSON response is parsed and *typed into the
    focused window*. Treat the server as hostile. It may return oversized, malformed,
-   or control-character-laden responses, try to make Vocalinux type key sequences,
+   or control-character-laden responses, try to make Voculinux type key sequences,
    shell commands or terminal escapes, or redirect requests elsewhere.
-4. **Local VocaGateway embed** (`gateway_embed/`). Vocalinux can start a
+4. **Local VocaGateway embed** (`gateway_embed/`). Voculinux can start a
    [VocaGateway](https://github.com/VocaHQ/vocagateway) container via podman or docker
    compose. It writes the compose `.env` (`runner.py`, with `_IMAGE_RE` guarding image
    refs) and fetches pairing JSON and QR SVG from the gateway over HTTP (`pairing.py`,
@@ -66,7 +66,7 @@ has the user's privileges. Input from these places is untrusted:
 - Out of scope: `web/` (the marketing website), `docs/`, `packaging/` (AppImage,
   Flatpak, AUR, Snap recipes), `snap/`, `.github/` workflows, and bugs that live
   in third-party engines (whisper.cpp, VOSK, sherpa-onnx, onnxruntime, torch)
-  themselves. Report those upstream, unless Vocalinux calls them unsafely.
+  themselves. Report those upstream, unless Voculinux calls them unsafely.
 
 ## How to exercise it
 - `python -m pytest -q tests/` runs the full suite offline. Hardware and display tests