Rename Ledger to Chronicle: repo, package, CLI (with ledger alias)

[MaxGhenis]

Executes Max's rename order (2026-08-07): Ledger → Chronicle (chronicle.institute). The repo is already renamed to PolicyEngine/chronicle (GitHub redirects active).

Renamed (code identity):

• dist policyengine-ledger → policyengine-chronicle; import packages policyengine_ledger → policyengine_chronicle, ledger → chronicle
• CLI entry chronicle with a back-compat ledger alias (María's documented uv run ledger publish-raw flow keeps working)
• tests, docs, ADR filenames, .github/chronicle-agents.yml, CI job names, prose (Chronicle/Microcosm capitalized)

Frozen v1 machine surfaces (deliberately unchanged — existing artifacts, the witnessed journal, Supabase, and R2 depend on them):

• fact-identity hash domains ledger.{fact,observed_measure,dimension_set,universe_constraint_set,aggregate_fact,semantic_fact,concept_alignment,source_release,source_series}.v*
• schema ids ledger.bundle*.v1, ledger.build_artifact.v1, ledger.consumer_fact.v1, ledger.relational.v1, policyengine_ledger.{consumer_artifact,target_profile,resolved_target,approved_agents}.v1
• ledger.db artifact filename; R2 buckets ledger-raw/ledger-derived; Supabase schema "ledger" and mirror tables/columns (ledger_builds, ledger_source_status); .ledger_derived row marker
• governance role ids (ledger-*), concept authorities (ledger-us), hashed source_package.yaml specs, db/data/**, wire-contract JSON schemas (byte-identical packaged/docs copies)
• codex/thesis-ledger-facts branch wiring in thesis-facts-append.yml
• POLICYENGINE_LEDGER_* / LEDGER_* env names

The consumer-contract self-reference guard now rejects {ledger, policyengine_ledger, chronicle, policyengine_chronicle}. A follow-up issue will scope the deliberate v2 migration of the frozen surfaces.

Full local suite re-run in progress at PR-open time (subset gates for every previously failing class green locally; ruff clean); final count will be posted as a comment before merge.

🤖 Generated with Claude Code

[MaxGhenis]

Full local suite after all fixes: 611 passed, 1 skipped, ruff clean (the same 612 collected as pre-rename main). Frozen-surface verification: schema ids, hash domains, R2 buckets, Supabase names, governance role ids, hashed source_package specs, and db/data all byte-identical to origin/main.