feat(identity): rename user-visible identity to voculinux with one-time legacy import

The fork takes its own name everywhere a user can see it: binaries
(voculinux, voculinux-gui), desktop entry, autostart, tray, D-Bus
namespace (com.voculinux.Voculinux, no alias for the old name),
config/data/cache dirs, single-instance lock, IBus engine identity,
tray icons, resource prefixes, VOCULINUX_* environment names, and the
update-checker user agent. The internal Python module stays vocalinux
and the distribution metadata keeps the upstream URLs as provenance.

On first run a previous Vocalinux install's config.json, custom
dictionary, and portal restore token are copied once into the new
locations (new config always wins, no merge, no write-back); models
re-resolve through the pinned-checksum download path. An offline
naming-sweep test proves no old-name strings remain on user-visible
surfaces outside the allowlist.

Refs #18

scripts/install-test.sh

@@ -17,7 +17,7 @@
 # exercise a path no user takes.
 #
 # Local mode only: install.sh chooses it by finding a pyproject.toml naming
-# vocalinux in the working directory, so extracting the tree and running from it
+# voculinux in the working directory, so extracting the tree and running from it
 # tests this commit. Remote mode (curl | bash, which clones the latest tag) is
 # not covered here.
 #
@@ -33,7 +33,7 @@ INSTALL_HOME="/home/$INSTALL_USER"
 # Local mode puts the venv inside the tree, which is why the checkout is copied
 # rather than written to: a bind-mounted host tree would come back owned by a
 # container uid with a venv in it.
-TREE="$INSTALL_HOME/vocalinux"
+TREE="$INSTALL_HOME/voculinux"
 
 fail() {
   echo "FAIL: $*" >&2
@@ -41,11 +41,11 @@ fail() {
   exit 1
 }
 
-# install.sh writes a full transcript under ~/.local/state/vocalinux/. It is the
+# install.sh writes a full transcript under ~/.local/state/voculinux/. It is the
 # only place the per-distro package manager output survives.
 dump_install_log() {
   local log
-  log="$(ls -1t "$INSTALL_HOME"/.local/state/vocalinux/install-*.log 2>/dev/null | head -n1 || true)"
+  log="$(ls -1t "$INSTALL_HOME"/.local/state/voculinux/install-*.log 2>/dev/null | head -n1 || true)"
   if [ -n "$log" ]; then
     echo "== last 200 lines of $log ==" >&2
     tail -n 200 "$log" >&2
@@ -132,8 +132,8 @@ echo "   install took $(( $(date +%s) - START ))s"
 echo "== Smoke: is there an installation, and does it import =="
 VENV="$TREE/venv"
 [ -x "$VENV/bin/python" ] || fail "no venv interpreter at $VENV/bin/python"
-[ -x "$INSTALL_HOME/.local/bin/vocalinux" ] || fail "no wrapper at ~/.local/bin/vocalinux"
-[ -f "$INSTALL_HOME/.local/share/applications/vocalinux.desktop" ] \
+[ -x "$INSTALL_HOME/.local/bin/voculinux" ] || fail "no wrapper at ~/.local/bin/voculinux"
+[ -f "$INSTALL_HOME/.local/share/applications/voculinux.desktop" ] \
   || fail "no desktop entry; install_desktop_entry did not run"
 
 # The injection backends are reached through subprocess, not GI, so no typelib
@@ -159,7 +159,7 @@ esac
 # Through the wrapper rather than the venv directly: the wrapper is what the
 # desktop entry and the user's PATH invoke, and it carries the GI_TYPELIB_PATH
 # and pywhispercpp library-path resolution the bare console script does not.
-su - "$INSTALL_USER" -c "'$INSTALL_HOME/.local/bin/vocalinux' --version" \
+su - "$INSTALL_USER" -c "'$INSTALL_HOME/.local/bin/voculinux' --version" \
   || fail "the installed wrapper cannot report a version"
 
 su - "$INSTALL_USER" -c "'$VENV/bin/python' - " <<'PY' || fail "the installation does not import"