refactor!: rebrand CCAM to AgentHub

Clean break, no compatibility alias. Renames the product name, the CLI
binary (`ccam` -> `agenthub`), the env var prefix (`CCAM_` ->
`AGENTHUB_`), the Prometheus metric namespace (`ccam_*` ->
`agenthub_*`), the tmux session prefix (`ccam-lane-<id>` ->
`agenthub-lane-<id>`), the per-repo runtime profile directory
(`.ccam/profile` -> `.agenthub/profile`), the lanes state root
(`~/.claude/ccam-lanes` -> `~/.claude/agenthub-lanes`), the bundled
plugins (`plugins/ccam*` -> `plugins/agenthub*`) and their slash
commands (`/ccam-doctor` -> `/agenthub-doctor`, `/ccam:*` ->
`/agenthub:*`).

Because there is no alias, an existing install has to be updated by
hand: rename its `.ccam/profile` directory and any `CCAM_*` variables,
and reinstall the plugin under its new name.

Two other name families are deliberately left alone here, since they are
not just strings: the `Claude-Code-Monitor` repository/marketplace name,
and the `agent-dashboard` npm package plus its `~/.claude/agent-dashboard`
runtime directory, which holds the live database and needs a migration
rather than a rename.

Verified: server 1406/1406, client 459/459, `grep -i ccam` clean across
tracked files, `openapi.yaml` regenerated (95 paths, unchanged count).

server/__tests__/lane-data.test.js

@@ -4,7 +4,7 @@
  *
  * The database lifecycle tests use a SQLite-shaped fixture hook (write a file,
  * remove a file) rather than a real Postgres — the property worth proving is
- * CCAM's own orchestration (when a hook runs, what name it is trusted with,
+ * AgentHub's own orchestration (when a hook runs, what name it is trusted with,
  * that a repeat call is a no-op), not any particular database engine.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
@@ -13,10 +13,10 @@ const os = require("node:os");
 const pathMod = require("node:path");
 const fsMod = require("node:fs");
 
-const SUITE_ROOT = fsMod.mkdtempSync(pathMod.join(os.tmpdir(), "ccam-data-"));
+const SUITE_ROOT = fsMod.mkdtempSync(pathMod.join(os.tmpdir(), "agenthub-data-"));
 process.env.DASHBOARD_DB_PATH = pathMod.join(SUITE_ROOT, "dashboard.db");
 process.env.LANES_ROOT = pathMod.join(SUITE_ROOT, "lanes");
-process.env.CCAM_SECRETS_PATH = pathMod.join(SUITE_ROOT, "secrets.env");
+process.env.AGENTHUB_SECRETS_PATH = pathMod.join(SUITE_ROOT, "secrets.env");
 
 const { describe, it, after } = require("node:test");
 const assert = require("node:assert/strict");
@@ -48,7 +48,7 @@ function makeLane(over = {}) {
 
 /** Write a profile into a repo directory. `hooks` maps name -> script body. */
 function writeProfile(root, envText, hooks = {}) {
-  const dir = pathMod.join(root, ".ccam", "profile");
+  const dir = pathMod.join(root, ".agenthub", "profile");
   fsMod.mkdirSync(pathMod.join(dir, "hooks"), { recursive: true });
   fsMod.writeFileSync(pathMod.join(dir, "profile.env"), envText);
   for (const [name, body] of Object.entries(hooks)) {
@@ -70,7 +70,7 @@ const SQLITE_DB_HOOKS = {
 };
 
 describe("secrets", () => {
-  const secretsPath = process.env.CCAM_SECRETS_PATH;
+  const secretsPath = process.env.AGENTHUB_SECRETS_PATH;
 
   it("falls back to defaults when the file is absent", () => {
     assert.equal(fsMod.existsSync(secretsPath), false);
@@ -300,7 +300,7 @@ describe("lane data lifecycle: provision / reset / remove", () => {
     const adoptedLane = lanesLib.getLane(lane.id);
     const profile = profileLib.resolveProfile(adoptedLane);
     await runtime.removeLaneData(adoptedLane, profile, {});
-    assert.ok(fsMod.existsSync(dbFile), "an adopted lane's data is never CCAM's to destroy");
+    assert.ok(fsMod.existsSync(dbFile), "an adopted lane's data is never AgentHub's to destroy");
 
     slots.releaseSlot(lane.id);
   });
@@ -329,8 +329,8 @@ describe("lane data lifecycle: provision / reset / remove", () => {
 
 describe("runtimeFacts never leaks a secret value", () => {
   it("reports only names and an index, never a connection string", async () => {
-    fsMod.writeFileSync(process.env.CCAM_SECRETS_PATH, "PG_PASS=super-secret-password\n");
-    fsMod.chmodSync(process.env.CCAM_SECRETS_PATH, 0o600);
+    fsMod.writeFileSync(process.env.AGENTHUB_SECRETS_PATH, "PG_PASS=super-secret-password\n");
+    fsMod.chmodSync(process.env.AGENTHUB_SECRETS_PATH, 0o600);
 
     const lane = makeLane();
     writeProfile(lane.cwd, "DB_PREFIX=leak_l\nREDIS=1\n", SQLITE_DB_HOOKS);
@@ -347,8 +347,8 @@ describe("runtimeFacts never leaks a secret value", () => {
   it("redacts a hook echoing $DATABASE_URL, including its URL-encoded form", async () => {
     // A password with a character that changes shape once URL-encoded, so
     // both the raw and encoded substrings actually get exercised.
-    fsMod.writeFileSync(process.env.CCAM_SECRETS_PATH, "PG_PASS=p@ss/word\n");
-    fsMod.chmodSync(process.env.CCAM_SECRETS_PATH, 0o600);
+    fsMod.writeFileSync(process.env.AGENTHUB_SECRETS_PATH, "PG_PASS=p@ss/word\n");
+    fsMod.chmodSync(process.env.AGENTHUB_SECRETS_PATH, 0o600);
 
     const lane = makeLane();
     writeProfile(lane.cwd, "DB_PREFIX=echo_l\n", {