chore: settle product naming across app, widget and deployments

One word everywhere: ReplyPier in UI copy, package and image names, the
replypier.site domains (app/api/docs/help), REPLYPIER_* settings and the
--rp-* design tokens.

- public widget API is window.ReplyPier with replypierId / replypierBaseUrl /
  replypierConfig / replypierToken, loader at webclient/replypier.min.js;
  both bundles rebuilt from source
- NOTICE, llms.txt, CONTRIBUTING, HELP_CENTER_INFRA and the demo runtime
  config rewritten; the demo config ships no third-party keys
- migration adds the ReplyPier managed model value to the AI model enum
- local compose project, database, role, volume and Docker network carry the
  same name

backend/app/core/auth.py

@@ -31,13 +31,13 @@ logger = get_logger(__name__)
 
 # Enterprise: Personal Access Tokens (PATs). PATs are an enterprise-only feature, so the
 # resolver lives in the enterprise package. In the community edition that package is absent
-# and this falls back to a no-op, meaning "cmat_" bearer tokens simply fail normal JWT
+# and this falls back to a no-op, meaning "rpat_" bearer tokens simply fail normal JWT
 # verification like any other invalid token. See app/enterprise/services/pat.py.
 #
 # The enterprise resolver is imported lazily (on first use) rather than at module load: the
 # enterprise package pulls in the API routers, which import this module, so an eager import
 # here would create a circular import during application start-up.
-PAT_TOKEN_PREFIX = "cmat_"
+PAT_TOKEN_PREFIX = "rpat_"
 _pat_resolver = None
 _pat_resolver_loaded = False
 

backend/tests/test_personal_access_token.py

@@ -67,7 +67,7 @@ def test_validate_token_roundtrip_and_last_used(db, test_user):
 def test_validate_token_rejects_wrong_and_garbage(db, test_user):
     repo = PersonalAccessTokenRepository(db)
     repo.create_token(user_id=test_user.id, organization_id=test_user.organization_id, name="cli")
-    assert repo.validate_token("cmat_not-a-real-token") is None
+    assert repo.validate_token("rpat_not-a-real-token") is None
     assert repo.validate_token("jwt-style-token") is None
     assert repo.validate_token("") is None
 
@@ -127,7 +127,7 @@ def test_resolve_pat_user_rejects_non_pat_token(db):
     assert resolve_pat_user("", db) is None
 
 
-# --- Integration: the open-source get_current_user hook resolves cmat_ tokens ---
+# --- Integration: the open-source get_current_user hook resolves rpat_ tokens ---
 
 import asyncio  # noqa: E402
 
@@ -157,7 +157,7 @@ def test_get_current_user_accepts_valid_pat(db, test_user):
 
 def test_get_current_user_rejects_bogus_pat(db, test_user):
     with pytest.raises(HTTPException) as exc:
-        asyncio.run(get_current_user(_request_with_bearer("cmat_bogus"), None, db))
+        asyncio.run(get_current_user(_request_with_bearer("rpat_bogus"), None, db))
     assert exc.value.status_code == 401
 
 
@@ -170,7 +170,7 @@ from app.enterprise.schemas.personal_access_token import PATCreate  # noqa: E402
 
 
 def test_create_pat_rejected_when_request_uses_a_pat(db, test_user):
-    req = _request_with_bearer("cmat_sometoken")
+    req = _request_with_bearer("rpat_sometoken")
     with pytest.raises(HTTPException) as exc:
         # current_user/request are passed as kwargs, matching how FastAPI invokes the
         # handler (the rate-limit decorator reads current_user from kwargs).
@@ -180,8 +180,8 @@ def test_create_pat_rejected_when_request_uses_a_pat(db, test_user):
 
 
 def test_create_pat_allowed_with_interactive_session(db, test_user):
-    # A JWT bearer (not cmat_) represents an interactive login and is allowed.
+    # A JWT bearer (not rpat_) represents an interactive login and is allowed.
     req = _request_with_bearer("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.payload.sig")
     resp = asyncio.run(create_personal_access_token(
         PATCreate(name="ok"), request=req, db=db, current_user=test_user))
-    assert resp.token.startswith("cmat_")
+    assert resp.token.startswith("rpat_")