rename(phase 1): CapaKraken → Nexus across code, UI, docs, CI

- @capakraken/* → @nexus/* across 12 packages (root + 11 workspaces),
  1551 import lines migrated via codemod
- User-visible brand strings renamed (emails, page titles, PWA
  manifest, mobile header, MFA backup-codes header, tooltips, signin
  page, invite page, weekly digest, install prompt)
- TOTP issuer "CapaKraken" → "Nexus" (existing secrets still valid;
  re-enrollment relabels them in users' authenticator apps)
- Function rename: assertCapaKrakenDbTarget → assertNexusDbTarget
- LocalStorage migration shim in apps/web/src/app/layout.tsx copies
  capakraken_* → nexus_* on first load (guarded by nexus_migrated_v1
  sentinel; runs once per browser, then never again)
- Service-worker cache name capakraken-v2 → nexus-v2 with one-time
  caches.delete('capakraken-v2') from the same shim
- Email-domain fixtures @capakraken.{dev,app} → @nexus.{dev,app} in
  seed data, e2e specs, SMTP default fallback
- Dockerfile.dev / Dockerfile.prod / all .github/workflows/*.yml
  pnpm --filter @capakraken/* → @nexus/*
- README, CLAUDE.md, LEARNINGS.md, all docs/*.md, .env.example,
  tooling/deploy/.env.production.example brand sweep

Phase 1 deliberately leaves untouched (handled in Phase 3 cutover):
- PostgreSQL DB name "capakraken" and POSTGRES_USER "capakraken"
- Volume names capakraken_pgdata etc.
- Compose project name "capakraken" / "capakraken-prod"
- db-target-guard default expectedDatabase
- env-var CAPAKRAKEN_EXPECTED_DB_NAME
- Container DNS names in docker-compose.ci.yml

Quality gates green: pnpm typecheck (7/7), pnpm test:unit (7/7),
pnpm lint (0 errors), check:exports/imports/architecture all pass.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

docs/installation.md

@@ -1,6 +1,6 @@
 # Installation Guide
 
-This guide covers everything needed to get CapaKraken running from a fresh clone.
+This guide covers everything needed to get Nexus running from a fresh clone.
 
 ---
 
@@ -20,18 +20,18 @@ You do **not** need Node.js or pnpm installed locally; the application runs enti
 ## 2. Clone & Configure
 
 ```bash
-git clone https://github.com/your-org/capakraken.git
-cd capakraken
+git clone https://github.com/your-org/nexus.git
+cd nexus
 cp .env.example .env
 ```
 
 Open `.env` and fill in the required values:
 
-| Variable | Description | Example |
-|---|---|---|
-| `NEXTAUTH_SECRET` | Random secret for session signing | see command below |
-| `NEXTAUTH_URL` | Full URL the app is served from | `http://localhost:3100` |
-| `DATABASE_URL` | PostgreSQL connection string | already set in `.env.example` |
+| Variable          | Description                       | Example                       |
+| ----------------- | --------------------------------- | ----------------------------- |
+| `NEXTAUTH_SECRET` | Random secret for session signing | see command below             |
+| `NEXTAUTH_URL`    | Full URL the app is served from   | `http://localhost:3100`       |
+| `DATABASE_URL`    | PostgreSQL connection string      | already set in `.env.example` |
 
 Generate a secure `NEXTAUTH_SECRET`:
 
@@ -88,14 +88,14 @@ The wizard automatically redirects to the sign-in page once the account is creat
 If you prefer the command line, run the setup script inside the running container:
 
 ```bash
-docker exec capakraken-app-1 \
+docker exec nexus-app-1 \
   node scripts/setup-admin.mjs \
   --email admin@example.com \
   --name "Admin" \
   --password changeme123
 ```
 
-Replace `capakraken-app-1` with your actual container name if different (check with `docker ps`).
+Replace `nexus-app-1` with your actual container name if different (check with `docker ps`).
 
 Expected output on success:
 
@@ -114,7 +114,7 @@ The script exits with code 0 in both cases.
 **Running on the host** (advanced): If you have Node.js and pnpm installed locally and `DATABASE_URL` is reachable from your host, you can also run:
 
 ```bash
-pnpm --filter @capakraken/db exec prisma generate   # ensure Prisma client is built
+pnpm --filter @nexus/db exec prisma generate   # ensure Prisma client is built
 node scripts/setup-admin.mjs --email admin@example.com --name "Admin" --password changeme123
 ```
 
@@ -149,7 +149,7 @@ For production deployments:
   ```
 - Set `NEXTAUTH_URL` to your real HTTPS domain:
   ```dotenv
-  NEXTAUTH_URL=https://capakraken.yourdomain.com
+  NEXTAUTH_URL=https://nexus.yourdomain.com
   ```
 - See `tooling/deploy/README.md` for reverse-proxy configuration and TLS setup.
 - Never commit `.env` to version control — it contains secrets.